Privacy policy

Last updated: 17 October 2026

This policy explains which personal data Ondine collects, why, and what rights you have, as required by the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

Who is responsible for your data

The data controller is Omniteca Lab di Nicolazzo G., Via Montegrappa 25, 73040 Alliste (LE), Italy, VAT IT04466720754. For any question about your data write to info@omniteca.it.

Which data we collect

Account data: when you register in the creator, your email address, the name you enter (optional) and your password, which we store only in encrypted (hashed) form. We also record when you registered and when you last signed in.
Your designs: the covers and images you save or export, and the images you upload.
Technical data: like any website, our server records in its logs the IP address, date and time, requested page and browser of each visit. We use them only for security and to fix problems.
Cookies: only technical cookies, needed to keep you signed in (session cookie and, if you choose "Keep me signed in", a sign-in cookie for 30 days). We do not use analytics, advertising or profiling cookies.

Visiting the public pages of this site (home, blog, tutorials, FAQ) requires no registration and sets no cookies.

Why we use your data

To provide the creator: your account, saving and exporting your designs (performance of the service you request, GDPR art. 6(1)(b)).
To send you the emails you ask for, such as the password reset link. We send no newsletters and no marketing.
To keep the service secure and working (our legitimate interest, GDPR art. 6(1)(f)).

We do not sell your data, we do not use it for advertising and we do not make automated decisions about you.

Who else handles your data

Hosting: the site and the creator run on a server of Contabo GmbH in the European Union (France), which acts on our behalf.
Email: password reset emails are sent through the mail service of Seeweb s.r.l. (Italy).
Google Fonts: the creator loads fonts from Google's servers, which receive your IP address when you use the editor.
YouTube: the tutorial videos are loaded from YouTube (in privacy-enhanced mode) only when you click to play them.

Google and YouTube may process data outside the European Union, under the safeguards provided by the GDPR.

How long we keep your data

Account data and designs: as long as your account exists. When you ask us to delete it, we delete it.
Server logs: 14 days.
Backups: a limited time, after which deleted data disappears from them too.

If you had an account on the previous version of Ondine and saved designs there, your account and designs have been kept so that you can still use them. You can ask us to delete them at any time.

Your rights

You can ask us to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format: write to info@omniteca.it. You also have the right to lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali.

Minors

Registration in the creator is reserved to people aged 18 or over. If we learn that an account belongs to a minor, we delete it.

Changes

We may update this policy. The date at the top shows the last change.