Privacy & Cookie Policy — Tutorilla

Privacy Policy (GDPR/UK GDPR + baseline US)

Controller. Steffen Römer, Straße der Pariser Kommune 27, 10243 Berlin, Germany. Contact: contact@tutorilla.com. (No DPO appointed.)

What we collect. Account data (name, email, password hash); profile/content (tutorials, comments, likes); usage data (logs, device/browser, approximate location, diagnostics); cookies/SDK data; limited billing metadata. Payment details are processed by our processors.

Purposes & legal bases (GDPR Art. 6).

• Provide the service and account: Art. 6(1)(b)
• Improve/security (fraud prevention, analytics): Art. 6(1)(f)
• Comply with law (e.g., DSA/DMCA responses, tax): Art. 6(1)(c)
• Marketing communications (with consent where required): Art. 6(1)(a)/(f)
• Moderation/trust & safety: Art. 6(1)(f)

Minors. Not directed to children under 16 in the EU/EEA (13 in the US). If collected inadvertently, we delete.

Recipients / processors. We use vetted processors with data processing terms.
Vendors we use (where applicable):

• Stripe (payments/subscriptions)
• Google Analytics (analytics; disabled until consent in the EEA)
• Firebase (Google) — e.g., Hosting; optionally Authentication, Firestore/Storage, Functions (only if enabled)

International transfers. Where data are transferred outside the EEA/UK, we use appropriate safeguards (e.g., EU SCCs/UK IDTA) and assess local laws.

Retention. Kept only as long as necessary for the purposes described or as required by law.

Your rights (GDPR Arts. 15–22). Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You can lodge a complaint with your supervisory authority.

Do Not Track (CalOPPA). We don’t respond to DNT signals. See Cookie Policy for opt‑out choices.

California (CPRA). We currently do not meet CPRA thresholds; if that changes, we will provide a CPRA notice and rights workflow.

Security. We use reasonable technical and organizational measures.

Contact. contact@tutorilla.com.

Cookie & Tracking Policy (TTDSG/GDPR)

We use essential cookies to run Tutorilla. With your consent, we may also use analytics and other non‑essential cookies/SDKs.

Consent (TTDSG §25 + GDPR). We obtain opt‑in consent before setting non‑essential cookies and provide an equal “Reject all” option. You can withdraw consent anytime via “Cookie settings”.

What we use.

• Essential cookies (authentication, security, preferences)
• Analytics (e.g., Google Analytics) — disabled until consent
• Optional marketing/CRM tools — disabled until consent

Examples of non‑essential tools: Google Analytics; Firebase Analytics/SDK (if enabled).

Managing preferences. Use the “Cookie settings” link in the footer or your browser settings.