Privacy

Last updated 3 November 2026 · version 1

Your photos never reach us. We only get what we need to sell you Shootpacked and help you: your email address, your purchase and your messages.

1. Who looks after your data

The controller of your personal data is Ben Barkai, a sole trader doing business as Shootpacked, IČO 22073264, V Kapslovně 2770/5, 130 00 Prague 3, Czech Republic.

For anything about your data, email [email protected].

2. Your photos never reach us

Shootpacked runs on your computer, inside the Claude desktop app. Your original photos, clips and voice notes never leave your computer. Faces are matched on your computer and never uploaded.

To suggest names and albums, Claude sees small previews and the first seconds of speech as text. These go to Anthropic through your own Claude account, the same as when you send Claude a photo. Anthropic handles them under its own terms, its privacy policy and your Claude privacy settings.

We never receive your files, previews, transcripts or anything else from your computer.

3. What we collect

• When you buy: your email address, and from Stripe the purchase ID, amount, date, and the name and billing country you entered at checkout. Your card details stay with Stripe. We never see them.
• When you download: your private download link, and the time and IP address of each download.
• When you write to us: your email address and what you send us.
• When you visit this website: standard technical logs from our hosting and Cloudflare, such as IP address, browser and time, used for security.

4. Why we use it, and on what legal basis

• To sell and deliver Shootpacked, send your order email and updates, and handle refunds and support: to perform our contract with you (GDPR art. 6(1)(b)).
• To keep accounting and tax records: because the law requires it (art. 6(1)(c)).
• To stop download links being misused and keep the website secure: our legitimate interest in protecting our product and site (art. 6(1)(f)).
• To deal with complaints, chargebacks and legal claims: our legitimate interest in defending our rights (art. 6(1)(f)).

We don’t send newsletters or marketing. If we ever do, it will be only with your consent, and you can withdraw it at any time. We don’t sell your data. We don’t make automated decisions about you.

5. Who helps us

• Stripe processes payments. Stripe also uses some payment data for its own purposes, such as fraud prevention and its legal duties, under the Stripe privacy policy.
• Resend sends our emails, such as your order email.
• Hetzner Online GmbH (Germany) hosts this website and the downloads.
• Cloudflare delivers and protects this website.

We also share data with our accountant and with public authorities when the law requires it.

6. Transfers outside the EU

Stripe, Resend and Cloudflare may process data outside the European Economic Area, including in the United States. When they do, the transfer is protected by the EU–US Data Privacy Framework where the company is certified under it, or by the European Commission’s standard contractual clauses. Hetzner keeps data in the EU.

7. How long we keep it

• Invoices and accounting records: 10 years, as Czech law requires.
• Download records: 12 months.
• Support emails: 3 years after our last message.
• Website security logs: only as long as needed for security, then deleted automatically.

confirm these periods (accounting: with the accountant)

8. Your rights

You can ask us to:

• show you the data we hold about you, and give you a copy;
• correct it;
• delete it, unless the law says we must keep it;
• limit how we use it;
• give it to you in a portable format.

You can also object at any time to anything we do on the basis of our legitimate interest. To use any of these rights, email [email protected]. We answer within one month.

You can complain to the Czech data protection authority, Úřad pro ochranu osobních údajů (https://uoou.gov.cz), or to the authority in the EU country where you live.

9. Cookies

This website uses only cookies that are strictly necessary for it to work. No analytics, no ads, no tracking pixels. That’s why there is no cookie banner.

When you pay, Stripe’s checkout page sets its own cookies on Stripe’s website.

10. Age

Shootpacked is for people aged 18 or over. We don’t knowingly collect data from children.

11. Changes

If we change this policy, we update the date and version at the top of this page. If a change matters for you, we’ll tell you by email.