Privacy policy
Version of 21 October 2026
1. Controller
Maskow Softwares UG (haftungsbeschränkt)
Hans-Sachs-Str. 53a, 90542 Eckental, Germany
E-mail: datenschutz@maskow.io
Phone: +49 (0) 911 / 60 99 00 74
We have not appointed a data protection officer because we are not required to do so under Art. 37 GDPR and § 38 BDSG.
2. Visiting this website
When you open a page, your browser transmits data that our hosting provider stores in server log files: IP address, date and time, the page requested, the referring page, the browser and operating system. This is necessary to deliver the website and to detect attacks.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Log entries are deleted after 14 days at the latest.
3. Cookies
We only use cookies that are technically necessary. A session cookie keeps you logged in and protects forms against cross-site request forgery. If you tick "remember me" at login, an additional cookie stores that choice. We do not use tracking, advertising or analytics cookies, so no consent banner is required.
Legal basis: § 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR.
4. Customer account
To create an account we process your name, e-mail address and a hashed password. Your e-mail address is also the username with which Composer authenticates against our package repository, which is why we ask you to confirm it.
Legal basis: Art. 6 (1) (b) GDPR, performance of a contract. We delete account data when you close your account, unless commercial or tax law requires longer retention.
5. Orders and invoices
When you order a licence by e-mail, we process your name, e-mail address, billing address, VAT ID where given, the plan you ordered, the amount and the payment status to issue the invoice and the licence.
Legal basis: Art. 6 (1) (b) GDPR for the performance of the contract and Art. 6 (1) (c) GDPR for the retention of invoices, which German commercial and tax law requires us to keep for ten years.
6. Licence and download logs
Each time a licence key is used to download a package, we record the time and increase a counter, and we store the project identifier that the verification command reports. This lets us enforce the number of projects included in a plan and detect shared licence keys.
Legal basis: Art. 6 (1) (b) and (f) GDPR.
7. E-mail
We send transactional e-mail such as confirmation links, password resets, invoices and notices about your licence. We do not send marketing e-mail without your separate consent.
8. Recipients
The following processors act on our behalf under Art. 28 GDPR:
- Hetzner Online GmbH – Hosting of this website and its database (Germany). Privacy policy
- Amazon Web Services EMEA SARL – Delivery of transactional e-mail such as password resets and team invitations (Luxembourg / USA). Privacy policy
Where a processor transfers data outside the European Economic Area, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.
9. Your rights
Under the GDPR you have the right to
- access the personal data we hold about you (Art. 15),
- have inaccurate data corrected (Art. 16),
- have data erased (Art. 17),
- restrict processing (Art. 18),
- receive your data in a portable format (Art. 20), and
- object to processing based on legitimate interests (Art. 21).
To exercise a right, write to datenschutz@maskow.io. You also have the right to lodge a complaint with a supervisory authority, for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), which is responsible for our registered office.
10. Changes
We update this policy when our processing changes. The version date at the top of this page tells you which version applies.