Privacy policy
Last updated: 4 November 2026
1. Who we are
PAISTRY TECHNOLOGIES GmbH, Bretonischer Ring 8, 85630 Grasbrunn, Germany. Commercial register: HRB 300897, Munich Local Court. Email: info@paistry.tech.
We are responsible (“controller”) for the processing described here, unless a section says otherwise.
2. What this notice covers
- this website (paistry.tech);
- our AI agents, such as Stroodl, a shopping advisor – on our own page (stroodl.paistry.tech and cupcake.paistry.tech) and embedded on our partners’ websites;
- an agent shown inside an advertisement on a third-party website (see 3.3).
3. Where an agent runs, and what that means for you
3.1 On our own page. You talk to the agent directly. Our consent banner asks you per purpose before anything that recognises you is stored (6). Where an agent of ours runs without a banner, it asks once itself, after its first answer, whether it may remember you, so you can pick up your advice on your next visit. You can answer “Ja” (yes) or “Nein” (no) – or ignore the question, which means no. Nothing that recognises you is stored before you say “Ja”.
3.2 Embedded on a partner website. The partner’s own consent banner decides whether the agent may recognise you; the agent never asks a second time. The partner is responsible for its website and its banner. We run the agent on the partner’s behalf; the partner’s privacy notice applies. For our own purposes – statistics without personal reference, and, only if you agree to PAISTRY in the partner’s banner, recognising you across PAISTRY agents and improving our agents from your conversations (3.4) – we are responsible ourselves; this notice applies to that.
3.3 Inside an advertisement. When an agent is shown inside an ad on a website we have no contract with, it is labelled as an advertisement, it does not ask for consent and it stores nothing on your device. The conversation lives only as long as the ad is open. If you want to be recognised, use “Continue on Stroodl”, which opens our own page (3.1).
3.4 Our own purposes (we are the controller). Independently of any single website, PAISTRY processes for its own purposes:
- Recognising you across PAISTRY agents, so your conversations and history follow you from one website to the next – only if you agreed to PAISTRY by name: in a partner’s banner that lists PAISTRY as a vendor, in our own consent banner or the separate question in our agents, or by signing in with PAISTRY. This is a separate choice from being recognised on one website (6).
- Measuring our network as a whole (how many readers use PAISTRY agents and come back), on the same consent; without it, only counts without a visitor number.
- Running and securing our agents – on the basis of legitimate interest (7); you can object at any time.
- Improving our agents from your conversations – only with your consent (6). Without it, your conversations are not read for this.
Today we build no profiles about you and do not target ads at you as a person; a memory across visits exists only with your consent (6). We never use a partner’s data about you for our purposes without your consent to PAISTRY, nor to train AI models.
4. What we process
- What you type into an agent, and the agent’s answers.
- Technical data when you use the agent: IP address, browser and device type, the page you came from, time stamps. We derive the country from the IP address.
- Usage events: for example that the agent was opened, a suggestion or product was clicked, or an answer was rated. They are linked to a random session number, not to your name.
- Campaign parameters from the link you came through (e.g.
utm_campaign). - A visitor number – only if you said “Ja” (3.1) or the partner’s banner allows it (3.2).
- Your consent choices, so we can follow them and prove them.
- Sales reported by affiliate networks (for example Awin): if you buy something after clicking a product link, the network reports the sale to us; we match it to the visit the click came from. To make that possible, the link to the shop carries the random session number of your visit as a click reference, and the network returns it with the sale report. The number means nothing outside PAISTRY; we receive neither your name nor your contact details.
We do not ask for your name, email address or an account. Please do not enter sensitive personal data (e.g. health data) into the chat.
5. What the agent stores in your browser
We set no cookies. The agent uses your browser’s storage (localStorage and sessionStorage). When an agent is embedded on a partner’s website, the PAISTRY loader script also stores a few entries on the partner’s website (second table).
| Name | What for | How long | Needs your consent? |
|---|---|---|---|
paistry_session_id:<agent>, paistry_loader_sid | keeps one conversation together while the tab is open | until you close the tab | no – strictly necessary (§ 25(2) no. 2 TDDDG) |
session helpers (paistry_view_id, paistry_consent_asked, paistry_session_has_page_view, paistry_entry_tap:*, paistry_referer, cupcake:cache:*, cupcake:feed-scroll:<agent>) | show the agent correctly, count a question tapped on a link once, ask the consent question at most once per visit | until you close the tab (scroll position at most 30 minutes) | no – strictly necessary |
display states (paistry_onboarding_dismissed:<agent>, paistry_welcome_video_dismissed:<agent>, paistry.videoChatHint.shown, cupcake-motion-quiz-pulse, cupcake:chunk-reload:*, cupcake-preload-reload) | do not show a hint or video twice in one visit; reload once after an update | until you close the tab | no – strictly necessary |
cupcake-about-seen:<agent>, cupcake-intro-seen:<agent> | remembers that you have seen the note about this agent or its short intro, so they do not open by themselves on every visit | until you delete it; for most agents' intro only for the visit (session) | no – strictly necessary |
paistry_utm_*, paistry_landing_page | remember the campaign link and the page you arrived from in this visit | until you close the tab | no – strictly necessary (§ 25(2) no. 2 TDDDG) |
view snapshot (embedded, cupcake:view-restore-v2:<agent>) | restore the view when the partner’s page reloads | 2 minutes | no – strictly necessary |
paistry_conversational_consent | remembers your answer so we do not ask again | “Ja”, “Nein” or withdrawal: 395 days from your decision, then deleted and we ask again | no – storing your own choice is necessary |
conversation history (cupcake-syrup-state-v3:<agent>, cupcake-chat-state-v1:<agent>; formerly cupcake-syrup-state-v2:<agent>) | lets you continue a conversation after a reload – only for agents that offer this | until you close the tab · after your “Ja” or with consent in the partner’s banner: 395 days from your decision | no – a function you use; beyond the visit only after your “Ja” or with consent in the partner’s banner |
product list (cupcake-watchlist-v1:<agent>) | keeps the products you saved (♡) or recently opened in the agent – only for agents that offer this | until you close the tab · after your “Ja” or with consent in the partner’s banner: 395 days from your decision | no – a function you use; beyond the visit only after your “Ja” or with consent in the partner’s banner |
cupcake-product-view, cupcake-color-mode | your chosen product view (list or grid) and your light or dark mode | until you delete them | no – settings you made |
paistry_user_id, paistry_loader_uid (visitor number) | recognises you on your next visit so you can continue your advice | until you withdraw, at most 395 days from your decision, then deleted and we ask again (paistry_loader_uid: until you close the tab) | yes – only after “Ja” or with consent in the partner’s banner |
paistry_user_id_at | remembers when you said “Ja”, so the visitor number ends after 395 days | together with the visitor number (395 days) | no – part of storing your own choice |
| Name | What for | How long | Needs your consent? |
|---|---|---|---|
paistry_tracker_sid, paistry_tracker_sid_ts, paistry_tracker_sid_started | keeps one visit on the partner’s website together | one visit (30 minutes after the last activity) | no – strictly necessary |
paistry:overlay-preset:<partner>, paistry:reopen | keep the position of the agent window you chose; reopen the agent when a link in the agent takes you to another page of the same website | until you close the tab | no – strictly necessary |
paistry:asg:<agent>:<article> | keep the suggested questions for the article, so they are not loaded again when you go back | until you close the tab | no – strictly necessary |
paistry_consent_state | remembers the last consent state the loader saw, so a change is reported only once | 395 days from your decision, then deleted and you are asked again | no – storing your own choice is necessary |
paistry_uid_at, paistry_consent_state_at, paistry_consent_source | remember when and where you decided, so the visitor number and the decision end after 395 days | together with the entry they belong to (395 days) | no – part of storing your own choice |
paistry_uid (visitor number) | recognises you on partner websites on your next visit | until you withdraw, at most 395 days from your decision, then deleted and you are asked again | yes – only with consent for PAISTRY in the partner’s banner |
paistry_test | marks a PAISTRY test device so its visits are not counted as readers; set only by our team | until it is removed | no – never set for readers |
Inside an advertisement (3.3) none of these are stored. You can delete all of them at any time in your browser settings. The complete list in machine-readable form is at paistry.tech/.well-known/paistry-device-storage.json.
6. Your consent and how to withdraw it
We ask for consent per purpose. “Recognise me here” (on this website or by this agent) and “recognise me across PAISTRY” (3.4) are separate choices: you can give either, both or none, neither is a condition for using the chat, and each can be withdrawn on its own. If you withdraw “across PAISTRY”, the link between your visits on different websites is removed; recognition on a single website stays as you chose it there.
If you say “Ja”, the legal basis is your consent (Art. 6(1)(a) GDPR; for the visitor number in your browser § 25(1) TDDDG). You can withdraw at any time in the agent under “Privacy & consent”. The visitor number is then deleted from your browser immediately. On our side, it is removed from all your past visits as well, so they can no longer be connected to each other. Like every decision, we keep your withdrawal for 395 days as proof; during that time we do not ask again. Withdrawal applies to the future; what happened before remains lawful.
Your “Ja” and the visitor number last 395 days from your decision. Both are then deleted, and we ask you again.
What we ask your consent for
- Recognising you – the visitor number in your browser (5); here and, as a separate choice, across PAISTRY (3.4).
- Improving our agents from your conversations – finding wrong, outdated or unhelpful answers and testing changes to the agent before they go live. Without your consent, your conversations are not read for this.
- A memory across visits – in preparation, not yet in use: the agent could remember your needs and interests and choose answers, suggestions and, where an agent shows ads, ads for you from that memory. We already name these purposes in consent banners, so you do not have to be asked again when it starts. Until then no such memory is created; it comes into being only with your consent and lasts at most 395 days after your last visit.
On a website with a consent banner you give or refuse these consents for PAISTRY in the banner (13). Without a banner the agent asks only whether it may recognise you; everything else stays off until you have agreed to it.
7. What we do on the basis of legitimate interest (Art. 6(1)(f) GDPR)
For each purpose we weighed our interest against yours:
- Running and securing the agent (IP address, technical data). Our interest: deliver answers, detect and block abuse and bots. Your interest: not being tracked. Why it is fair: to recognise abuse patterns, we use a shortened form (the last part removed) beside the full IP address; both are deleted with the session record 426 days after the visit began (8); no profile is created.
- Counting how the agent is used (opened, clicked, rated, consent asked/answered). Our interest: improve the agent and report its reach to partners. Why it is fair: no recognition across visits unless you consented; reports are aggregated only.
- Measuring campaigns. Our interest: report to advertisers whether their campaign reached people and was useful to them. Why it is fair: reports are aggregated per campaign, creative and website only; we never pass on who you are.
- Choosing fitting sponsored suggestions. Our interest: sponsored suggestions that fit the topic finance the free service. Why it is fair: we use only the current visit (page, question, language, device type, country), never a profile; sponsored suggestions are always labelled as ads.
- Understanding demand (statistics and analyses across many conversations). Our interest: understand what readers need and give partners insight into demand on their websites. Why it is fair: the output is always aggregated and never describes an individual.
- Choosing fitting content: suggested questions for the article you are reading, the article as the context of your question, and the order of suggestions and products by page and device. Our interest: relevant answers and suggestions. Why it is fair: only data from the current visit, no profile.
We also use one feature of the IAB Transparency & Consent Framework: match and combine data from other data sources (feature 1). When an affiliate network (for example Awin) reports a sale that followed a click in the agent, we match it to the visit the click came from, to measure whether our recommendations lead to purchases. The report carries no name and no contact details, only the session number the link carried (4). We use no other features.
The full balancing test for each purpose, including the purposes as named in the IAB Transparency & Consent Framework, is at paistry.tech/legitimate-interest.
Your objection (Art. 21 GDPR)
You can object to each of these purposes at any time:
- With a consent banner: if the agent runs on a website with a consent banner, object there (usually under “Legitimate interest” or “Vendors”).
- Without a banner – for example on our own pages or on partner websites without a banner: by email to privacy@paistry.tech.
What an objection does:
| Purpose | After your objection |
|---|---|
| Choosing fitting sponsored suggestions | We no longer choose sponsored suggestions or ads from the page or your conversation. |
| Measuring campaigns | Your visit is no longer included individually in campaign reports; it is only counted anonymously. We delete the conversation text of that visit in the next nightly deletion run after it ended. |
| Counting how the agent is used | Your visits are no longer measured individually; they are only counted anonymously. |
| Understanding demand | Your conversation is not analysed for insights. We delete the conversation text of that visit in the next nightly deletion run after it ended. |
| Choosing fitting content | The agent no longer suggests questions from the article you are reading, no longer receives the article as context, and no longer orders suggestions and products by page and device. It still answers what you type. |
You can keep using the agent. You can also object by email to the processing without which it cannot work – delivery, security and storing your consent choice; we will then check your case individually.
8. How long we keep data
We keep personal data about you for one of two periods, and no other:
| Period | What it covers |
|---|---|
| 395 days – in your browser from your decision, on our side from your last visit | everything bound to your visitor number or your decision: the visitor number and its links; your stored decision, “Ja” and “Nein” alike; the conversation kept on your device after your “Ja”; the memory the agent answers from; a memory across visits (announced, not yet in use, 6); data kept only to improve our agents |
| 426 days from the start of the visit | everything bound to one visit: the session record with the full and shortened IP address, browser string, device type and start page; the conversation text and every classification derived from it; usage events (opened, shown, clicked, rated); error logs; sale reports from affiliate networks; reports built from visits |
We delete at the latest on the day the period ends. If a visit record carries your visitor number, the number is removed from it when the visitor number ends; the record itself stays until its own period ends.
We delete earlier in these cases:
- Objection to “Measuring campaigns” or “Understanding demand” (7): the conversation text of that visit, in the next nightly deletion run after the visit ended. The session record and counts stay until their period ends.
- Withdrawal of your consent (6): the visitor number, at once.
- Request for erasure (11): everything, at once.
Counts that refer to no visit and no person are not personal data; none of these periods applies to them.
9. Who receives data
AI providers. To answer your questions, we pass your input and the conversation history to providers of AI language models. They process the data solely on our behalf and on our instructions (processing on behalf, Art. 28 GDPR). Some of these providers are based in the USA. The transfer is based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or, where it does not apply, on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can obtain a copy on request at privacy@paistry.tech. On request, we will also name the individual providers.
Hosting. Our servers run at Hetzner in Germany, our database at Supabase in Frankfurt (EU).
Cloudflare (Cloudflare Inc., USA) delivers the agent’s pages, protects them from attacks and measures load times without cookies (Cloudflare Web Analytics).
Bunny.net (BunnyWay d.o.o., Slovenia) delivers images.
Advertising partners. When an agent shows ads from an advertising partner, the partner receives the address of the page and, only where this is switched on for the agent, the context of the conversation, so it can choose a fitting ad. We call an advertising partner only once your consent choice covers the purposes it needs for this.
Shops and affiliate networks (Amazon, Awin): when you click a product link, you leave the agent; the shop and the network may set their own cookies to attribute a purchase to us. For this, the link to the shop carries the random session number of your visit as a click reference, and the network returns it with the sale report. We receive the report without your name or contact details and match it to the visit the click came from (4).
Partners that embed an agent (3.2) see counts, the questions asked of their agent and the agent's answers, never who asked them. Where one of our own agents runs on a partner's website, that partner receives the same view as a recipient, so it can understand what its readers are looking for; this rests on our legitimate interest in understanding demand, and if you object to it, the texts of your visit are not shown. Advertisers of a campaign receive aggregated reports only.
10. This website (paistry.tech)
We use no analytics tools on this website that store anything on your device. Cloudflare measures page load times without cookies and without storing anything on your device (Cloudflare Web Analytics; legal basis: legitimate interest in a working website). Contact requests by email are used only to answer you.
11. Your rights
Access, correction, deletion, restriction, data portability, objection (Art. 21 GDPR), withdrawal of consent, and a complaint to a supervisory authority – for us the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach. Contact for privacy questions: privacy@paistry.tech.
12. Contact and DSA contact point
PAISTRY TECHNOLOGIES GmbH, Bretonischer Ring 8, 85630 Grasbrunn, Germany – info@paistry.tech (German and English).
13. IAB Transparency & Consent Framework
PAISTRY TECHNOLOGIES GmbH takes part in the IAB Europe Transparency & Consent Framework (TCF) and complies with its Policies and Specifications. Our vendor ID is 1663.
When an agent runs on a website that uses a TCF consent banner, we read the choices you made for PAISTRY in that banner and follow them. You give and withdraw consent there; you object to the purposes based on legitimate interest there (usually under “Legitimate interest” or “Vendors”), or at any time by email to privacy@paistry.tech.
| TCF purpose | Legal basis | Today |
|---|---|---|
| 1 – Store and/or access information on a device | consent | in use |
| 2 – Use limited data to select advertising | legitimate interest | in use |
| 3 – Create profiles for personalised advertising | consent | not yet in use (6) |
| 4 – Use profiles to select personalised advertising | consent | not yet in use |
| 5 – Create profiles to personalise content | consent | not yet in use |
| 6 – Use profiles to select personalised content | consent | not yet in use |
| 7 – Measure advertising performance | legitimate interest | in use |
| 8 – Measure content performance | legitimate interest | in use |
| 9 – Understand audiences through statistics or combinations of data from different sources | legitimate interest | in use |
| 10 – Develop and improve services | consent | in use |
| 11 – Use limited data to select content | legitimate interest | in use |
| Special purpose 1 – Ensure security, prevent and detect fraud, and fix errors | legitimate interest (cannot be objected to in the banner; write to us) | in use |
| Special purpose 2 – Deliver and present advertising and content | legitimate interest (as above) | in use |
| Special purpose 3 – Save and communicate privacy choices | legitimate interest (as above) | in use |
We also use one TCF feature: match and combine data from other data sources (feature 1), for the sale reports of affiliate networks (4). We do not link devices, and we use neither precise location data nor active scanning of device characteristics. We derive the country (non-precise location) from the IP address.
Which data we use for each purpose and how long we keep it is in sections 4 and 8; what we store in your browser is in section 5 and at paistry.tech/.well-known/paistry-device-storage.json.