Privacy

The short version

GeMarkt uses no analytics cookies, advertising pixels, cross-site trackers or third-party analytics scripts. Accounts are optional and use essential security cookies. We do not use your account identity for site measurement or advertising.

What we measure

We keep first-party aggregate counts for page views, successful wallpaper downloads and a small set of useful actions, such as opening an artwork, following a collection or continuing to an Etsy listing. A measurement can contain the page path without its query or hash, site language, public content slugs and a two-letter country code.

We do not record what you type into site search, a full referrer URL, a city or GPS location, cookie values, payment information or a name or email address in these measurements. The totals are action counts and daily estimates, not a count of identifiable or permanently recognised people.

Cookies and browser storage

We use essential cookies for account security, not analytics, and do not use localStorage for measurement. If your browser sends Global Privacy Control or Do Not Track, the optional interaction script does not send action events. Ordinary page and file requests still reach our server so that the site can be delivered and kept secure.

Your GeMarkt account

Creating an account is optional; articles and free tools do not require one. We store your verified email address, account identifier, creation date and name if supplied to provide the account you request. Registration does not subscribe you to marketing. AWS Cognito handles passwords, verification and recovery; GeMarkt does not receive your password.

If you choose Google sign-in, Google provides a unique account identifier, your email address and its verification status, and your name if available through AWS Cognito. We use these details to create and secure your GeMarkt account, not for advertising. We do not request access to Gmail, Drive or your contacts, and do not receive your Google password. Google also processes the sign-in under its Privacy Policy. Signing out of GeMarkt does not sign you out of Google, and deleting your GeMarkt account does not delete your Google account.

Account services use Amazon Web Services in Frankfurt, Germany. A session cookie expires after one hour; the sign-in security cookie lasts ten minutes and a pending sign-in request is valid for five minutes. A separate cookie, valid for ten minutes, can finish an interrupted deletion but cannot open your account. Cognito may set its own authentication cookies on its sign-in domain. Short-lived, keyed security counters limit abusive requests without storing the raw IP address in the account database.

Your favorites

When you save a favorite, we store the product identifier against your GeMarkt account so you can find it on later visits and in other sessions signed in to the same account. We use these saved identifiers only to provide your favorites, not for marketing or site measurement.

You can remove individual favorites. Deleting your GeMarkt account also removes your favorites from the live account database; the recovery-backup retention periods described below still apply.

Account deletion and retention

In Account you can sign out of all GeMarkt sessions or request deletion of your profile and sign-in identity. A deletion that cannot finish immediately is shown as pending, with a retry option. You can also contact us to request access, correction or help with deletion.

Expired sessions cannot be used, but their stored records may take a few days to be physically removed. Database recovery backups cover seven days; session recovery backups can cover up to 35 days. Recovery must respect completed deletion requests. We retain a keyed, non-readable identity marker to stop an old sign-in callback from recreating a deleted account. This marker contains no email or name and is not used for marketing or site measurement. Account-function operational logs are retained for seven days and do not intentionally contain passwords, tokens, cookie values or request bodies.

Country totals

The server uses an IP address momentarily to estimate only the visitor's country. The lookup happens on our own server against the locally installedDB-IP Country Lite database; the address is not sent to DB-IP. No city-level location is requested or retained in the aggregate report.

Local image tools

If you choose a room photo in the Room Palette Art Finder, the image is decoded, reduced and analysed only inside your browser. The photo, file name, pixel values and extracted colour palette are not uploaded to GeMarkt, stored in browser storage or included in measurement events. Closing or leaving the page releases the temporary local preview.

Server and event logs

Essential security logs can contain an IP address, timestamp, request method, page or file path without its query, response status, approximate country and browser user-agent. They are used to operate and secure the service, exclude obvious bots and avoid counting the same wallpaper request repeatedly. Raw security logs are retained for no more than 14 days.

Raw interaction-event logs do not contain IP addresses, user-agents, referrers or cookie values and are also rotated within 14 days. The resulting daily totals contain no IP address or persistent identifier and may be kept longer so that we can compare site and content performance over time. The raw logs and reports are private server files; they are not published or sold.

Why we process this limited data

We use it for our legitimate interests in protecting the service, understanding whether pages and free resources work, and deciding what to improve. We minimise the fields, retention and precision because those goals do not require behavioural profiles or cross-site tracking.

If you email us

If you write to contact@gemarkt.com, we receive your email address and whatever you include in the message. We use it to reply and manage the conversation; we do not add you to a marketing list without asking.

Buying through Etsy

GeMarkt does not yet take payment on this website. Product links open Etsy, which processes visits, accounts and purchases under its own privacy policy. We receive only the seller information Etsy makes available to operate and fulfil an order; we do not receive your complete payment-card details.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of personal data and to complain to your local data-protection authority. Aggregate site measurements cannot normally be linked back to you because we keep no persistent measurement identifier. For a privacy request or question, emailcontact@gemarkt.com.

GeMarkt is responsible for the limited first-party processing described on this page. If the measurement, account or checkout model changes, this notice will be updated before the new processing begins.