How your personal information is handled. Transparently and responsibly.
Last updated: July 17, 2026
Picks Office operates picksoffice.com. This Privacy Policy explains how I collect, use, store, and protect your personal data when you use the site, subscribe to my services, or interact with me through Discord, Telegram, or other channels.
As a Germany-based business, I address applicable obligations under the EU General Data Protection Regulation (GDPR). For California residents, I describe rights that may apply under the California Consumer Privacy Act (CCPA).
I collect the following categories of personal data when you use the site or subscribe to my services.
Account information includes your name (if provided), email address, and password when you create an account. If you sign up via Discord or Google OAuth, I receive basic profile data from those services.
Platform identifiers such as your Discord ID and/or Telegram ID are collected when you connect your account to access subscriber communities. These are used solely to manage channel access.
Payment information is processed by Stripe. I do not receive or store your full payment card number. I receive transaction references, payment or subscription status, and the billing information Stripe returns to the application.
For a Playbook purchase, I also receive the purchase email, selected product option, amount and currency, successful charge time, checkout and payment references, billing location information made available by Stripe, consent version and time, delivery status, refund or dispute status, and the version you are entitled to download. An account is not required.
Usage and analytics data includes allowlisted page, feature, and web performance events collected via PostHog after consent. The application also respects Do Not Track (DNT). Autocapture, person profiles, and session recording are disabled.
Communication data includes messages sent through the contact form or by email and is used to respond to your inquiry and maintain the relevant support history.
Under the GDPR, I process personal data only where I have a lawful basis. Processing your account data, subscription, and payment to deliver the services you subscribed to is based on contract performance (Art. 6(1)(b)). Analytics tracking via PostHog is based on your consent (Art. 6(1)(a)), which you can withdraw at any time. Improving the service, preventing fraud, and ensuring security is based on legitimate interest (Art. 6(1)(f)). Retaining transaction records as required by German tax and commercial law is based on legal obligation (Art. 6(1)(c)).
Processing Playbook order, consent, delivery, update entitlement, redelivery, refund, and dispute data is necessary to perform the purchase contract (Art. 6(1)(b)), comply with legal obligations (Art. 6(1)(c)), and protect transactions against abuse (Art. 6(1)(f)).
Your data is used to provide and maintain the service including picks, track record, dashboard, and community access. It is also used to process subscription payments through Stripe, manage your access to Discord and Telegram subscriber channels, send transactional emails such as subscription confirmations, password resets, and billing notifications, analyze product usage to improve features via PostHog with your consent, and respond to your questions and support requests.
Playbook purchase data is used to verify payment, deliver secure files, determine the latest same-edition version included in your 12-month update window, send purchase or requested redelivery emails, block automated access after refunds or during disputes, and provide product support.
I do not currently sell personal information or share it for cross-context behavioral advertising.
I use the following third-party services that may process your data. Stripe handles payment processing and may present supported wallet methods during checkout. Vercel provides website hosting, CDN, and private Blob storage for the Playbook files. Resend sends transactional purchase and redelivery emails. PostHog provides product analytics and requires your consent. Render hosts the backend (Strapi CMS). Discord and Telegram serve as subscriber community platforms. Each service has its own privacy policy available on their respective websites.
Some providers may process data outside the European Economic Area under the transfer safeguards described in their current privacy terms and any applicable data-processing agreement.
When you interact with Picks Office on Telegram, Discord, or X, the platform operator processes data under its own privacy policy. Picks Office does not control the platform's independent data practices.
Payment processing is handled by Stripe. I do not receive or store your full payment card details. Stripe may collect payment method details, billing information, device information, and network information to process transactions and prevent fraud. See Stripe's privacy policy at stripe.com/privacy for its current practices.
Playbook checkout uses Stripe as the sole payment processor for that product. Secure download tokens are signed by Picks Office and reveal neither your payment credentials nor a public storage location.
Account data is retained while the account is active and then handled according to an applicable deletion request and legal obligations. Transaction and accounting records are retained for applicable statutory periods. Analytics retention follows the current PostHog project settings. Support messages are retained only as needed to answer the request, maintain service history, resolve disputes, or satisfy legal obligations.
Playbook transaction, consent, invoice, refund, and dispute records are retained for the periods required by tax, accounting, and consumer law. Email access links expire after 72 hours, individual download links after 15 minutes, and the secure download-page cookie after 2 hours.
The application uses HTTPS, httpOnly secure authentication cookies where supported, environment-isolated credentials, request validation, and rate-limited sensitive endpoints. Stripe handles payment card data. No system is completely secure, so these controls reduce risk but cannot eliminate it.
As a data subject, you have the right to request a copy of all personal data I hold about you (Art. 15), request correction of inaccurate data (Art. 16), request deletion of your account and associated data (Art. 17), export your data in a machine-readable format (Art. 20), object to processing based on legitimate interest (Art. 21), restrict processing while a dispute is resolved (Art. 18), and withdraw consent for analytics at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email privacy@picksoffice.com. I will respond within the period required by applicable law.
You also have the right to lodge a complaint with a supervisory authority. The competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Where the CCPA applies, California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal treatment when exercising those rights.
To submit an applicable California request, email privacy@picksoffice.com with the subject line "California Privacy Request" or use the Do Not Sell or Share page.
Categories of Personal Information Collected:
I do not sell or share personal information for cross-context behavioral advertising.
Authorized Agents: You may designate an authorized agent to submit a CCPA request on your behalf. The agent must provide proof of authorization (e.g., a signed written permission or power of attorney). I will verify the agent's authority and your identity before processing the request.
Financial Incentives: I do not offer financial incentives for the collection, sale, or deletion of personal information.
The current California Attorney General overview is available at oag.ca.gov/privacy/ccpa.
My services are not intended for individuals under 18 (or the legal gambling age in your jurisdiction, whichever is higher). I do not knowingly collect personal information from children under 13 years of age. If I learn that I have collected personal information from a child under 13, I will delete it immediately. If you believe a child under 13 has provided personal data, please contact privacy@picksoffice.com.
For users aged 13-17: My services are restricted to adults only. If you are under 18, do not use this service.
I do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
I may update this Privacy Policy when data practices, providers, or legal requirements change. The page will show the date of the latest substantive review. Material notices will be provided where required by applicable law.
Picks Office – Luca Eggerdinger, Pfarrkirchener Str. 10, 84389 Postmünster, Germany. privacy@picksoffice.com