Privacy Policy

Last updated: 2026-09-13

1. Who we are

OhMontessori is operated by Hubert Wilga, a private individual based in Poland, who is the data controller for the personal data described below. Contact: hubert.wila@gmail.com.

2. What we collect

Account data — your email address and authentication data, handled by our authentication provider, Supabase.
Subscription/billing data — handled by Paddle, our payment processor and Merchant of Record. Paddle acts as an independent data controller for the payment details and billing information it collects directly from you at checkout — see Paddle's Privacy Policy. We only receive your subscription status and Paddle customer ID, not your card details.
Language preference — determined by which language version of a page you visit, and stored in your browser (localStorage) so other pages match it.
Images you upload — processed in your browser to generate a printable sheet. They are not uploaded to or stored on our servers.

3. Why we process it

To create and manage your account, provide the subscription you've paid for, communicate with you about your account or the Service, and comply with legal obligations (e.g. billing records). The legal basis is performance of a contract with you (Art. 6(1)(b) GDPR) and, for limited administrative purposes, our legitimate interest in running the Service (Art. 6(1)(f) GDPR).

4. Who processes your data on our behalf

Supabase — account authentication and database hosting.
Cloudflare — application hosting and access control.
Paddle — billing, subscription management, and (as an independent controller) payment processing.
Google (Google Analytics 4) — website usage analytics, only if you accept analytics cookies (see section 5).

These providers may process data outside the European Economic Area; where they do, they rely on adequacy decisions or Standard Contractual Clauses to safeguard your data.

5. Cookies and local storage

We use one strictly necessary cookie to keep you signed in (httpOnly session cookie) and browser localStorage to remember your language preference and your cookie choice.

Google Analytics runs only if you accept it in the cookie banner. If you do, it sets cookies (_ga, _ga_*, up to 2 years) and collects usage data such as pages viewed, approximate location and device type. The legal basis is your consent (Art. 6(1)(a) GDPR). Google may process this data in the United States under the EU–US Data Privacy Framework or Standard Contractual Clauses. You can withdraw consent at any time via Cookie settings; declining removes the analytics cookies.

6. How long we keep it

We keep account and subscription data for as long as your account exists, plus a period afterward where needed for billing/tax records or to resolve disputes. You can ask us to delete your account and associated data at any time (see below).

7. Your rights

Under GDPR, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact hubert.wila@gmail.com. You also have the right to lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl) or your local supervisory authority.

8. Changes to this policy

We may update this policy from time to time; material changes will be communicated by email or an in-app notice where practical.

9. Contact

Questions about this policy or your data: hubert.wila@gmail.com.