Privacy Policy

This policy explains how Justus Gotthardt & Lukas Gogol GbR processes personal data when you use Code Garden at code-garden.de.

1. Controller

Justus Gotthardt & Lukas Gogol
E-Mail: kontakt@code-garden.de
Privacy contact: kontakt@code-garden.de

"Code Garden" is a product and brand name operated by Justus Gotthardt & Lukas Gogol GbR.

2. Data We Process

Account and profile data (email, display name), authentication/session data, learning progress, created tasks and submissions, billing identifiers (for paid plans), and operational security logs.

3. Purposes and Legal Bases

We process data to provide and secure your account, deliver learning features, process subscriptions/payments, communicate service-related messages, and fulfill legal obligations.

4. Payments and Processors

Payment processing is provided by Stripe. We only store billing metadata required for subscription management. Payment card details are processed by Stripe.

4a. AI Features (OpenAI)

For AI-supported features (for example task generation, hints, and feedback), relevant user input is processed by OpenAI as our processor/sub-processor. This may include prompts you enter, task/submission text, and limited technical metadata required to provide and secure the feature.

Processing is performed to deliver requested AI functionality (Art. 6(1)(b) GDPR) and to ensure secure, reliable operation (Art. 6(1)(f) GDPR). Where processing occurs outside the EEA, we rely on appropriate transfer safeguards (for example Standard Contractual Clauses), where required.

5. Email Delivery

Transactional emails (for example verification and account notices) are sent via our configured email provider. Message metadata may be processed for delivery and abuse prevention.

5a. Cookies and Analytics (Google Analytics 4)

We use Google Analytics 4 to understand traffic sources (for example referral domains and campaign parameters) and measure product conversion events (for example sign-up and subscription checkout success). Analytics is loaded only after you actively choose "Accept all" in our cookie banner.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the "Cookie settings" link in the footer. If consent is withdrawn, analytics tracking is disabled for future events.

Provider: Google Ireland Limited (and potentially Google LLC as processor/sub-processor). Where data is processed outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses, where required.

6. Retention

We retain account and product data for as long as your account is active, and longer only where required by law or for legitimate security/accounting purposes.

7. Your Rights (GDPR)

You may request access, rectification, erasure, restriction, portability, and objection, where applicable. You may also lodge a complaint with a supervisory authority.

8. Contact

For privacy requests: kontakt@code-garden.de

Last updated: 2026-02-18