Privacy Policy (MechStress)
Last updated: 03.01.2026
1. Controller
The data controller responsible for processing your personal data is the website operator identified in our Impressum / Legal Notice.
Contact: info@mechstress.com
2. What data we collect
We may collect and process:
Account data: name, email address, login/account identifiers (for course access)
Purchase & billing data: product purchased, payment status, invoices, transaction IDs
Support communications: messages you send us (email, forms)
Technical & log data: IP address, browser/device data, timestamps, pages accessed (security/operation)
Payment card data: we do not store full card details. Payments are processed by our payment provider (Stripe).
3. Purposes of processing
We process your data to:
Provide and manage access to the course and member area
Process payments, prevent fraud, handle disputes/chargebacks
Provide customer support and service communications
Maintain platform security, prevent abuse, and improve reliability
Meet legal/accounting obligations
4. Legal bases (EU/EEA users)
Where GDPR applies, we rely on:
Contract (to deliver the course you purchased)
Legitimate interests (security, fraud prevention, platform operations)
Consent (only where required, e.g., certain non-essential cookies if used)
Legal obligation (accounting/tax compliance)
5. Service providers (processors / third parties)
We use the following providers to operate the service:
systeme.io (website, funnels, member area, course access, email automations)
Stripe (payments)
Bunny.net / Bunny Stream (video hosting/streaming for course content)
Namecheap / Private Email (domain and email hosting)
YouTube (embedded videos inside the members area, if used)
These providers may process data on our behalf (processor) or as independent controllers depending on their role.
6. International transfers
Some providers may process data outside Germany/EU/EEA. Where applicable, transfers are protected via appropriate safeguards (e.g., contractual protections provided by the vendor).
7. Data retention
We keep data only as long as needed:
Account data: for as long as you maintain an account, then a limited period for security/records
Purchase records: as required by tax/accounting law
Support messages: as needed to resolve the issue and for reasonable follow-up
Logs: retained for security and troubleshooting for a limited period
8. Your rights
Depending on your location, you may have rights to:
Access, correction, deletion
Restrict or object to processing
Data portability (EU/EEA)
Withdraw consent (where processing is based on consent)
To exercise rights, email info@mechstress.com.
9. Complaints
If you are in the EU/EEA, you may lodge a complaint with your local data protection authority. (Germany: a competent supervisory authority in your federal state.)
10. Security
We use reasonable technical and organizational measures to protect your data. No system is 100% secure.
11. Changes
We may update this policy. The “Last updated” date will reflect changes.