Privacy Policy

This site collects as little personal data as possible. This page explains exactly what is collected, why, and how to exercise your rights under the EU GDPR.

Data controller

Pure Studio (Dirck Mulder), based in The Netherlands (KVK 98665103, BTW NL005345618B56). Privacy questions: privacy@componentblocks.com.

The waitlist

If you join the waitlist, your email address is stored so we can email you once — when the product launches or when you purchase. It is not sold or rented. You can ask for deletion at any time. Legal basis: consent (Art. 6(1)(a) GDPR).

Purchases

Stripe collects your email, billing details, and payment method when you buy a block or the full pack. We receive only the Stripe customer identifier and your email (used to deliver the download via Resend). Legal basis: contract (Art. 6(1)(b)).

Analytics

With your consent, we use PostHog (EU-hosted) for privacy-conscious product analytics — which pages are visited and which components are previewed. This helps decide what to build next. Legal basis: consent.

Advertising

With your consent, we use the Google Ads tag and Meta Pixelto measure which ads led to a purchase, and to optimise our campaigns. Without consent, Google receives only anonymous "consentless pings" that cannot be linked to your identity. Legal basis: consent. You can withdraw at any time via the cookie banner.

Server logs

Our hosting provider Vercel logs your IP address and user-agent on each request for security and abuse prevention. Retained up to 30 days. Legal basis: legitimate interest (Art. 6(1)(f)).

What is not collected

No accounts, no cross-site profiling, no data sold to third parties. You do not need to log in to browse or preview components.

Subprocessors

EU/US transfers rely on Standard Contractual Clauses (SCC).

• Stripe — Payment processing (EU/US (SCC)).
• PostHog — Product analytics (EU-hosted) (EU).
• Google Ads — Advertising and conversion measurement (EU/US (SCC)).
• Meta — Advertising and conversion measurement (EU/US (SCC)).
• Resend — Transactional email (waitlist, license delivery) (EU/US (SCC)).
• Vercel — Website hosting and edge delivery (EU/US (SCC)).

Retention

• Waitlist email: until you ask for deletion or 24 months.
• Billing records (Stripe): 7 years, as required by Dutch tax law.
• Server logs: up to 30 days.
• Analytics events: 12 months, then aggregated.

Your rights

Under the GDPR you may request access, correction, deletion, or portability of your data, restrict or object to processing, and withdraw consent. Email privacy@componentblocks.com — we respond within 30 days. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

Strictly-necessary cookies are used for the site itself. Analytics and advertising cookies are only set after you select "Accept" in the cookie banner. Your choice is stored for 6 months, after which we ask again.

Changes

If this policy changes, the "last updated" date above will change with it.