Last updated: June 4, 2026
Thomas Harnisch
Königskinderweg 74f
22457 Hamburg, Germany
Email: info@apptolabs.com
This privacy policy applies to the website apptolabs.com and to the BannerMaker web application (the login area, including registration, the project dashboard and banner generation). For our other apps, please refer to the respective app pages (e.g. Langula Privacy Policy).
When you visit the website or use the application, your browser automatically transmits certain data for technical reasons:
This data is processed by our hosting provider to deliver the service. Server log files may be stored for up to 30 days for security and troubleshooting purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
The public website uses no tracking or analytics cookies. The BannerMaker application sets a single, strictly necessary session cookie (BANNERMAKER_SID) that keeps you logged in. It contains no advertising or tracking data. We also use your browser's local storage to remember interface preferences (e.g. whether the sidebar is collapsed). These are technically required for the service to function and therefore do not require consent (§ 25(2) TTDSG); legal basis Art. 6(1)(b) and (f) GDPR.
To use BannerMaker you must create an account. We process the data you provide:
We send a verification email to confirm your address. Legal basis: Art. 6(1)(b) GDPR (performance of the user contract). Account data is retained for the duration of your account and deleted upon account deletion, subject to statutory retention periods.
When you create a project you provide a website URL and may upload assets (logos, product images, fonts). To prepare your banners, our servers retrieve the URL you enter and may download publicly available assets (e.g. logo and images) from that page. We store your project settings, uploaded files, the extracted brand data and the generated banners so you can edit and download them. Legal basis: Art. 6(1)(b) GDPR. This data is retained until you delete the project or your account.
Banner generation and website analysis are performed with the help of AI services. For this purpose, the relevant project content (e.g. website text and brand information, your instructions and uploaded image URLs) is transmitted to:
These providers process the data on our behalf solely to generate the requested output and do not use it to train their models via the API. Processing may take place on servers in the USA; the transfer is safeguarded by EU Standard Contractual Clauses. Legal basis: Art. 6(1)(b) GDPR (provision of the service) and Art. 49(1)(b) where applicable. Please do not submit personal data of third parties or confidential information into the chat/instructions.
Transactional emails (verification, password reset, account and purchase notifications) are sent via Google's email infrastructure (Gmail SMTP, Google Ireland Ltd). The recipient address and message content are processed for delivery. Legal basis: Art. 6(1)(b) GDPR.
Paid plans are processed by our payment service provider Stripe Payments Europe, Ltd. Payment details (e.g. card data) are entered directly with Stripe and are not stored by us; we only receive payment status and metadata. Alternatively, access to banner generation can be unlocked with a single-use voucher code; redeeming a code stores the code, the redemption date and the associated account/project for billing and abuse-prevention purposes. Legal basis: Art. 6(1)(b) and (f) GDPR.
You have the following rights under the General Data Protection Regulation:
You can delete your projects and your account at any time within the application. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
For privacy-related questions or to exercise your rights, please contact:
Thomas Harnisch — info@apptolabs.com
AppToLabs