Privacy Policy

1. Controller

The controller responsible for this website under the General Data Protection Regulation (GDPR) is:

2. Photo editing and local project data

Edicsy performs photo editing in your browser. Your photos stay on your device. We don’t store them. The application may use browser storage, including session storage and IndexedDB, to keep preferences and the current project available in your browser. This data remains on your device and can be removed by clearing the site data in your browser.

The legal basis for storage strictly necessary to provide the editor is Article 6(1)(b) GDPR and section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), where applicable.

3. Website hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States. When you visit the website, Vercel may process technical connection data such as your IP address, request time, requested page, browser information, and diagnostic or security logs to deliver and protect the service.

This processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable, and efficient provision of the website. Technical logs are retained only as long as required for delivery, security, troubleshooting, and applicable legal obligations. Vercel may process data outside the European Economic Area using safeguards available under Chapter V GDPR.

More information is available in Vercel’s Privacy Notice.

4. Google Analytics

With your consent, this website uses Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand aggregate website usage. It may process information about pages viewed, interactions, approximate location, device and browser characteristics, and identifiers stored in first-party cookies.

Google Analytics is disabled until you select “Accept analytics.” The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Refusing consent does not limit the editor. You can withdraw or change your decision at any time using “Privacy & cookie settings” on the homepage. Withdrawal does not affect processing that occurred before withdrawal.

Advertising storage, advertising personalisation, and Google Signals are disabled in the website configuration. According to Google, individual IP addresses from users in the EU are used for coarse geolocation and discarded before they are logged. Analytics data may nevertheless be processed by Google companies outside the EEA. Google states that it uses recognised transfer mechanisms, including the EU–US Data Privacy Framework where applicable.

Analytics event data is retained according to the retention period configured for the Google Analytics property and is deleted or aggregated when it is no longer required for usage analysis. See Google’s Privacy Policy and Google Analytics EU privacy information.

5. Your privacy choice

Your analytics decision is stored in your browser under edicsy-analytics-consent so the site can remember it. This preference contains the policy version, your Analytics choice, and the time of the decision, but no user ID. It expires after 180 days, or earlier if you clear the site data or change your selection.

6. Contact

If you email us, we process your email address, message, and related correspondence to answer your request. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries or Article 6(1)(f) GDPR for other enquiries. Correspondence is deleted when it is no longer needed, subject to statutory retention duties.

7. Your GDPR rights

Subject to the applicable legal requirements, you may request access, correction, deletion, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time.

To exercise your rights, contact helloedicsy@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU Member State of your residence, workplace, or the alleged infringement.

8. Changes to this policy

We may update this policy when the website, service providers, or legal requirements change. The current version and its update date are published on this page.