Privacy Policy

1. Who is responsible for your data

Enanza Ventures GmbH

Martin-Luther-Str. 14, D-20459 Hamburg, Germany

Managing Director: Stephan Akrong

Email: info@mein-kreativbuch.de

We are a small team. For privacy questions you can reach us directly at this address — we are not legally required to appoint an external data protection officer.

2. What data we process

Depending on how you use our service, we process:

• Your account details — name and email address.
• Details for the book — what you enter about your child, such as name, age and character traits, plus an optional photo.
• Order details — for a printed book, your delivery and billing address.
• Technical data — IP address, timestamp and browser, which your device sends automatically.
• Cookies and similar storage — only within the scope of your consent (Section 5).

We need the book details and your contact data to perform our contract with you. Without them we cannot create a book. Everything else is optional.

3. Why we process it — and on what basis

We do not carry out automated decision-making with legal effect for you — for instance profiling that would go beyond designing your book.

4. Service providers we work with

A book is not made by us alone. We pass on only the data each service genuinely needs for its task, and where required we have concluded data processing agreements under Art. 28 GDPR with these providers.

How the AI services are involved

For the story text we send what you entered about your child to one of the AI providers listed above. A photo you upload goes only to Microsoft (Azure, data centre in the EU) — the other providers never receive photos. Based on what the providers commit to contractually, this content is used only to deliver the service and not to train their models.

Analytics and advertising — what happens when

We want to be especially precise here, because these services depend on your consent to differing degrees:

• PostHog and Meta are loaded only once you have agreed. Without your consent nothing is sent to them — not from your browser and not from our server.
• The Google tag loads when the page loads, i.e. before you have made a choice. Until you agree, it stores nothing on your device and reads nothing from it; it only sends anonymous aggregate signals that cannot be traced back to you. It sets cookies only after you consent.
• After a purchase we additionally report the sale directly from our server to the advertising platforms, so we can tell which ad worked. For Meta this happens only with your consent, and then in encrypted form. To Google we send nothing that identifies you.
• Ads in ChatGPT (OpenAI): If you came to us through one of our ads in ChatGPT, our server reports to OpenAI when you create a free preview image or order a book. We send the ad click's identifier, the type and time of the event, the page you arrived on and, for an order, the amount. Only if you have agreed to marketing cookies do we also send your email address and customer number as an irreversible hash, plus your IP address and browser identifier, so OpenAI can match the event to the ad. Without your consent we additionally mark the event as excluded from personalised advertising. If you have agreed to marketing cookies, we also load OpenAI's measurement script (OpenAI Pixel). It tells OpenAI which of our pages you view and sets two cookies: one holding the identifier of an ad click (30 days) and a random browser identifier (365 days), which we also attach to the reports from our server. The script does not read form entries: that feature is switched off, and as long as it is not, we do not load the script at all. Without your consent the script is not loaded, and visitors who did not come through a ChatGPT ad are then not reported to OpenAI either. The legal basis is our legitimate interest in measuring the success of our advertising (Art. 6(1)(f) GDPR), and your consent for the additional details (Art. 6(1)(a) GDPR).
• If you arrive via an ad, your browser remembers that click's identifier so a later purchase can be attributed to the right campaign. This identifier belongs to the ad click, not to you, and is not used to build profiles across other websites.

5. Cookies and your consent

We distinguish three kinds:

• Necessary — keeps you logged in, remembers your language and your cookie choice. The site does not work without them, so they cannot be switched off.
• Analytics — helps us see where people get stuck in the book builder.
• Marketing — measures which of our ads led to an order.

We ask you on your first visit. Declining is exactly as easy as agreeing. You can change your choice at any time via "Privacy settings" in the footer. If you withdraw consent, we delete the cookies that were set and the identifiers stored with them.

6. Your child's data

Our service is aimed at adults creating a book for a child. The details about the child therefore come from you as the person with parental responsibility, and we process them solely to produce the book you ordered.

This data is not used for advertising, not passed to advertising networks and not combined with other data. We need an uploaded photo only until the drawn character has been created from it and checked — after that we delete it automatically. Beyond that, you can request deletion at any time.

7. How long we keep data

• Photos uploaded for a free preview image: 7 days after the preview image is created, so you can still order the book for your preview. After that we delete the photo automatically; the preview image itself is kept, and to order you upload the photo again. If a book has already been created from the preview, that book keeps the photo so you can still order it; once ordered, the period for ordered books applies, and without an order we delete the photo after 90 days at the latest.
• Photos uploaded for an ordered book: until the illustration has been created from them and checked, and at most 48 hours after that. If creation fails, we delete the photo after 90 days at the latest.
• Your book and account: for as long as your account exists, so you can keep viewing and reordering your book.
• Invoices: up to ten years, because commercial and tax law require it (Sec. 147 AO, Sec. 257 HGB). We cannot delete these records on request; we can only restrict them from further use.

8. Transfers outside the EU

Some of the services named above process data in the USA. For these transfers we rely on the EU Standard Contractual Clauses under Art. 46 GDPR.

9. Your rights

You have the following rights in relation to us:

• Access — what data we hold about you.
• Rectification — if something is wrong.
• Erasure — unless a retention obligation prevents it.
• Restriction — we then only store the data instead of using it.
• Portability — you receive your data in a common format.
• Withdrawal — you can withdraw consent at any time with future effect.

An informal email is enough. You can also lodge a complaint with a data protection supervisory authority — the one responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information.

10. Emails from us

We write to you when there is something to report about your order — for example that your book is ready or has shipped. We also send one reminder if your book is finished but not yet ordered in print. You can unsubscribe from that reminder at any time via the link in the email.

11. Questions and changes

For any privacy question, write to us at info@mein-kreativbuch.de. We will reply within one month.

If our service changes, we will update this policy. We will point out any significant changes to you.

Last updated: 7 October 2026