Privacy policy

Last updated: August 18, 2026

1. Controller

Markus Tausendfreund
Lachenweg 49, 4125 Riehen, Switzerland
Email: support@tausendfreund.me

2. Overview

RacePaintShop is a local Windows desktop application for designing vehicle liveries. Your designs and project data stay on your computer. Data is transferred only in the clearly defined cases listed below (optional AI feature, update check). License verification works without any transfer at all. There is no usage tracking and no advertising/analytics services in the application.

3. Processing in the desktop app

3.1 License verification (no data transfer)

The license is a signed file that you receive by email after your purchase. It contains your name or email address, the product purchased and the purchase date. The app verifies the signature exclusively on your computer.

No transfer: Nothing is sent to us or to third parties in the process. There is no license server, no user account and no activation.
No internet required: Verification works completely offline.
Storage: The license file is stored locally in your user profile and you can delete it at any time.

3.2 Purchase/payment (merchant of record)

The purchase is made through the checkout page of Polar Software, Inc., 3500 South DuPont Highway, Dover, DE 19901, USA, which, as merchant of record, independently processes payment, contact and billing data under its own responsibility; its privacy policy applies (polar.sh/legal/privacy). You enter your payment details there — we never see them. To process the order, we receive your email address and the order data so that we can deliver your license file, and we process this data to perform the contract and to comply with statutory retention obligations. In the process, data is transferred to the USA.

3.3 Optional AI feature

If you use the optional AI design feature, your input (text prompt) and, where applicable, reference/preview images are sent directly, using the API key you have stored yourself, to the provider you have chosen — Google (Gemini API) or OpenAI. Their privacy policies apply. The provider of RacePaintShop does not receive these prompts/images. API keys are stored locally in encrypted form (Windows DPAPI).

The “Test connection” (Verbindung testen) and “Fetch models” (Modelle abrufen) functions in the settings also send a request with your API key to the respective provider (solely to check access or to load the list of models, without any design content).

3.4 External links (checkout page, Trading Paints, help)

In some places, the app opens your default browser with external websites — e.g. the seller’s checkout page, the Trading Paints upload page or linked help pages. The app itself does not transfer any personal data in doing so; from the moment the page is opened, the privacy policy of the website visited applies.

3.5 Update check

At startup, the app retrieves a small version file (version.json) from the product website (tausendfreund.me/racepaintshop, hosting: STRATO AG) so it can notify you about new versions. This generates the usual server log data at the hosting provider (e.g. IP address, time); no license, device or usage data is transmitted. If the retrieval fails (e.g. offline), the app starts normally.

3.6 No other transfers

Beyond this, the app does not transfer any personal data. No tracking, no audience measurement, no disclosure to third parties for advertising purposes.

4. This website

This presentation website is a static information page without cookies, without tracking and without analytics services. No forms are offered and no external fonts/scripts from third-party servers are embedded. When the site is accessed, the hosting provider records technically necessary server log data (e.g. IP address, time, page accessed), which is processed to provide and secure operation. The website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (strato.de/datenschutz).

5. Retention

Local data (projects, license status, API keys) remains until you delete it or uninstall the app.
Order/billing data is retained in accordance with statutory retention obligations (Switzerland: generally 10 years, Art. 958f CO).

6. Your rights (Switzerland, revFADP)

In particular, you have the right to access (Art. 25 revFADP), rectification, erasure/destruction and release/portability of your personal data within the statutory framework. The competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch.

Requests to: support@tausendfreund.me

7. Processors / recipients

Polar Software, Inc., Dover, DE, USA (merchant of record, sales and payment processing).
Google LLC or OpenAI — only when you actively use AI, with your own API key.

8. Supplement for customers in the EU/EEA (GDPR)

If the offer is directed at persons in the EU/EEA, the GDPR may apply in addition. In that case, the following also applies:

Legal bases: Art. 6(1)(b) GDPR (contract), (c) (legal obligations), (f) (legitimate interests, e.g. preventing misuse).
Data subject rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and the right to lodge a complaint with a supervisory authority (Art. 77).
Transfers to third countries (USA): on the basis of standard contractual clauses / appropriate safeguards.