←Back to System

Privacy Statement

Last Updated: February 21, 2026

According to Art. 12 General Data Protection Regulation (GDPR), we would like to inform you about the type, scope, and purpose of the personal data collected, used, and processed by HziTools and about your rights.

1. Controller according to Art. 4 No. 7 GDPR

HziTools Alexander Zörner

c/o Postflex #10341

Emsdettener Straße 10

48268 Greven

Germany

Email: hello@hzitools.com

2. Information about Data Processing

A. Website Connection Data

When you visit our website, your browser automatically transmits connection data (IP address, browser type, date/time, and referrer URL). We store IP addresses for a maximum of 7 days to detect and ward off cyber-attacks.

  • Legal Basis: Art. 6 (1) lit. f GDPR (Legitimate interest: security and operation of our business).
  • Hosting: This website is hosted using Cloudflare Pages. Cloudflare may process connection data globally to ensure speed and security.

B. License Management (Our Backend)

When you activate our software, we process your Email address, your License Key, and a Hardware ID (HWID) generated from your computer's components.

  • Purpose: To verify your license and enforce the limit of 5 devices per license.
  • Storage: This data is stored in a Cloudflare D1 Database.
  • Legal Basis: Art. 6 (1) lit. b GDPR (Performance of a contract).

C. Purchases via Paddle (Merchant of Record)

We use Paddle as our Merchant of Record for all order processing and payments. Paddle is the "Seller" of the software. When you buy our product, you enter into a contract with:
Paddle.com Market Ltd (Judd House, 18-29 Mora Street, London, EC1V 8BT, UK).

  • Data Flow: Paddle collects your billing and payment data. We do not receive your credit card or bank details. Paddle only sends us your name, email, and order ID so we can generate your license.
  • Privacy Policy of Paddle: Please refer to Paddle’s Privacy Policy for more details.
  • Legal Basis: Art. 6 (1) lit. b GDPR.

D. Use of YouTube

We embed videos from YouTube (Google Ireland Limited, Dublin, Ireland). We use the "Enhanced Privacy Mode", which means YouTube only stores data about you if you actually play the video.

  • Legal Basis: Art. 6 (1) lit. f GDPR (Legitimate interest: product demonstration and user experience).

3. Processors

We use the following categories of processors:

  • Hosting & Database: Cloudflare, Inc. (USA/Global) – Data processing agreements are in place.
  • Payment & Order Processing: Paddle.com (UK/Global).

4. Data Security

We employ modern security standards (SSL/TLS encryption) to protect your data. Your license data is stored on specifically protected databases provided by Cloudflare.

5. Your Rights

Under the GDPR, you have the following rights:

  • Right to access, rectification, and erasure of your data.
  • Right to restrict processing and the right to data portability.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with a supervisory authority (e.g., BayLDA in Bavaria).