1. Controller
The controller within the meaning of the GDPR is:
Hans-Peter Beck - OtterIT, Wiestering 12, 28870 Ottersberg, Deutschland
Email: info@otterwallet.com
2. Data collected
When using this service, the following data is processed:
- IP address (technically required for each page request)
- Browser type and version
- Payment transaction data (when making a payment via Paddle)
- Pass data entered by you (title, description, barcode content)
3. Legal basis
Processing is carried out on the basis of Art. 6(1)(b) GDPR (performance of a contract) — data processing is necessary to provide the service.
4. Third-party providers
- Paddle (Paddle.com Market Limited) — Payment processing as Merchant of Record. Paddle's privacy policy applies.
- jsDelivr CDN — Delivery of JavaScript libraries (bwip-js, jsQR, pdfjs-dist, barcode-detector). jsDelivr's privacy policy applies.
- Google Analytics 4 (Google Ireland Limited) — Web analytics to improve our service. Only loaded after your explicit consent (Art. 6(1)(a) GDPR). IP addresses are anonymized. Google's privacy policy applies. You can withdraw your consent at any time by deleting your cookies.
- Google Tag Manager (Google Ireland Limited) — Management of analytics tags. Does not set cookies or collect personal data itself.
- Cloudflare Turnstile (Cloudflare, Inc., USA) — CAPTCHA protection for the support form. When the support form is loaded, a script from Cloudflare is loaded that processes technical attributes (browser, IP) to detect bots. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in spam protection). The Cloudflare Privacy Policy applies.
5. Storage duration
Created Apple Wallet passes are only held in the server's memory and are automatically deleted after 30 minutes.
For Google Wallet passes with an image, the uploaded image is stored on the server because Google retrieves the image data via URL. These images are automatically and permanently deleted after 7 days. If you consent to the cookie banner, analytics cookies from Google Analytics are set.
Messages sent via the support form are delivered by email to our support inbox (support@otterwallet.com) and stored there for processing your request. The email contains a daily-rotating hash of your IP address for spam detection — the IP itself is not stored in plain text. Emails are deleted once they are no longer needed for contract fulfillment or statutory retention obligations.
6. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). To exercise your rights, please contact: info@otterwallet.com