Privacy Policy

Version: 22 September 2026

1. Data controller

The data controller is András Bendefy, individual entrepreneur in Hungary, operator of Gear Generator Lab. Privacy contact: geargeneratorlab@gmail.com. Mandatory business-identification details are provided on issued invoices and in legally required business records.

2. Data we process

When you create and use an account, we may process your email address, authentication identifiers and security/session data, the date and version of your Terms/Privacy acknowledgement, purchase and payment-reference information, and the expiry date of Premium export access. Gear calculation inputs are processed to provide the requested calculation/export functions.

We also record limited service analytics such as page-view and download event type, page and timestamp. The application's analytics-event records are designed not to store your IP address, email address or application user ID.

3. Purposes and legal bases

Account, authentication, purchase and entitlement data are processed as necessary to provide the service and perform contracts with users. Security/session data are processed to protect accounts and the service against misuse. Records required for accounting, taxation or other legal compliance are processed to meet legal obligations. Limited service analytics are used to understand and improve the service and are processed on the basis of the operator's legitimate interests, subject to applicable data-protection law.

4. Service providers and recipients

Gear Generator Lab uses Supabase for authentication/database services, Stripe for payment processing, and Render for application hosting. These providers process data as necessary to provide their respective services. Invoicing/accounting providers may also receive transaction data where necessary for invoicing and statutory reporting.

5. International processing

Some service providers may process data outside Hungary or the European Economic Area. Where required, transfers are subject to the safeguards made available by the relevant provider and applicable data-protection law.

6. Payments

Payment-card details are entered into Stripe's checkout environment and are not stored by Gear Generator Lab. Gear Generator Lab receives payment status, transaction references and related information needed to activate purchased access, maintain transaction records and support users.

7. Retention and account deletion

Account data used only to operate your account is kept while the account is active and is deleted or anonymised when no longer needed, subject to technical and legal requirements. You can request account deletion from My Account when no paid Premium export access is active. Transaction, invoicing, tax, accounting, fraud-prevention or dispute records may be retained for the period required or permitted by applicable law. Security and analytics records are retained only for as long as reasonably necessary for their stated purposes.

8. Your rights

Subject to applicable data-protection law, you may request access to and correction or erasure of personal data, restriction of processing, data portability where applicable, and may object to processing based on legitimate interests. You may also lodge a complaint with the competent data-protection supervisory authority. Requests can be sent to geargeneratorlab@gmail.com.

9. Security and sessions

Gear Generator Lab limits an account to one active application session at a time. Signing in from another browser or device invalidates the previous Gear Generator Lab application session. Reasonable technical and organisational measures are used to protect account and transaction data.

10. Changes

If this policy materially changes, the displayed version/date will be updated and, where required, renewed acknowledgement or other notice will be provided.