Privacy

Which personal data we process when you visit kspr.online, buy a template, write to us or use the checkout plugin, and why. This notice follows the Swiss Data Protection Act (revDSG) and, where it applies, the EU GDPR.

Who is responsible

Lulu Amani by Kasper, Alexander Kasper, Klarastrasse 2, 4600 Olten, Switzerland, contact@luluamani.ch, +41 77 410 71 77.

Hosting and server logs

The pages and our services run on our own server at Hetzner Online GmbH in Germany, managed with the self-hosted software Coolify. The web server writes technical access logs (time, page address without parameters, status code, browser) to run and secure the site. Your IP address and the referring page are not stored in these logs. The logs are kept in the running server container and are deleted when the site is updated, and they are not combined with other data. Legal basis: our legitimate interest in a secure, working website.

Storage in your browser

Without your consent we set no cookies and use no analytics. Your choice of light or dark mode and your cookie choice are stored only in your own browser (local storage) and never sent to us. Fonts are served from our own server, so your visit is not shared with Google or other font services.

Google Analytics, only with your consent

If you click "Accept" in the cookie banner, we use Google Analytics 4 to see how visitors use these pages, for example which templates they look at. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data can also be processed by Google LLC in the USA. Without your consent no Google code is loaded at all.

With your consent Google Analytics sets cookies (_ga and _ga_…, kept for up to two years) with a random identifier and records the pages you view, your approximate location, device and browser, and these actions on the pages: clicks on a buy button (template and price), opening a live preview in full screen, the template filters, the featured template, "Join the beta", sending the contact form (only the topic, never the content or your details) and a completed purchase (order number, template and price, no name or email). Google Analytics 4 does not store IP addresses. We keep the data in Google Analytics for 14 months.

Legal basis is your consent. You can change your choice at any time with "Cookie settings" at the bottom of every page; we then delete the Google Analytics cookies in your browser. Transfers to the USA rely on the EU-US and Swiss-US Data Privacy Framework. Google's privacy policy: policies.google.com/privacy.

Live previews from Framer

The Framer template pages and the featured template on the Framer page show the live demo site of a template in an embedded frame. When the frame comes into view, your browser loads that demo site from framer.app, a service of Framer B.V., Amsterdam, Netherlands. Framer then receives your IP address and technical browser data and processes them under its own privacy policy: framer.com/legal/privacy-statement. We tell your browser not to send Framer the address of our page. The same applies when you open a live preview in a new tab. Legal basis: our legitimate interest in showing the product you are looking at.

Contact form and email

When you use the contact form, we receive your name, email address, the topic and your message. The form is sent to our mailbox as an email through Resend (see below); we do not store it anywhere else. To stop spam, the server keeps your IP address in memory for one hour to limit the number of messages. The same applies when you email us directly. We use your details only to answer you. Legal basis: our legitimate interest in answering, or steps before a contract. We keep the messages as long as needed to answer them, and longer only if they belong to a purchase or contract that we must keep records of.

Buying a template

Payments are handled by Stripe Payments Europe Ltd. (Ireland) and its affiliates, including Stripe, Inc. (USA). Stripe collects your payment details directly on its checkout page; we never see your card number. We receive your name, email address, billing address, the product and the payment status. We need this to deliver the template, send the receipt and keep accounting records (legal basis: contract and legal obligation). Stripe can use cookies on its own checkout page to prevent fraud. Stripe's privacy policy: stripe.com/privacy.

Emails we send

We send the remix link, receipts and answers to the contact form through Resend (Resend Inc., USA), with data processed in the EU (Ireland). Resend receives the email addresses and the content of the email.

Checkout plugin

If you run a Framer site with our checkout plugin:

• Your subscription is billed through Stripe Billing on our Stripe account. We receive your name, email address, billing address, the plan and the payment and subscription status. When you cancel, we store the reason you pick and your optional comment, at Stripe and in our checkout service, to improve the plugin.
• Our checkout service stores for each website: a website ID, a hash of the website's secret key (never the key itself), the domains of the site, the ID of your connected Stripe account, test or live mode, your checkout settings (for example a required terms checkbox and its text), the mirrored subscription status, whether the site has a founding price, and cancellation reasons. The data sits in a file on our server at Hetzner in Germany.
• Connecting Stripe: you connect your own Stripe account through Stripe Connect. This lets our service create products, prices and checkout sessions in your account. We do not receive your bank details or the card details of your customers.
• Your customers: when someone buys on your site, the cart (price IDs and quantities) passes through our service to Stripe, and the order status passes back to your site's thank-you page. We do not store your customers' data. Stripe collects their payment and contact details in your Stripe account, and you are responsible for them as the controller.

Legal basis: the contract with you and our legitimate interest in a secure, working service. We keep subscription and billing records for ten years as Swiss accounting law requires; the data of a website is deleted when you ask us to after the subscription has ended.

Transfers abroad

Our providers process data in Switzerland, the EU and the USA. Transfers to the USA rely on the EU-US and Swiss-US Data Privacy Framework or on standard contractual clauses.

How long we keep data

Purchase and billing records are kept for ten years because Swiss accounting law requires it. Everything else is deleted when it is no longer needed for the purposes above.

Your rights

You can ask what data we hold about you, have it corrected or deleted where no legal duty to keep it applies, object to processing, withdraw a consent and receive your data in a portable format. Write to contact@luluamani.ch. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or to the data protection authority in your EU country. We do not make automated decisions about you.

Version of 3 October 2026