Privacy Policy

Last updated: September 2026

We take the protection of your personal data seriously. This policy explains what data we collect when you visit or buy from Mockora, why we collect it and what rights you have under the General Data Protection Regulation (GDPR).

1. Controller

Daniel Dantas Miranda, trading as Mockora
Straßburger Str. 42, 10405 Berlin-Bezirk Pankow, Germany
Email: dantas.mirandasa@atomicmail.io
Phone: +49 30 23125 742

2. Visiting our website

Our website is hosted by an external web hosting provider that processes data on our behalf under a data processing agreement (Art. 28 GDPR). When you visit the website, the server automatically processes technical data: IP address, browser type and version, operating system, referring page, pages visited, and date and time of access. This is necessary to display the website, keep it secure and prevent misuse. Server log files are deleted after a short period, usually within 30 days.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website).

3. Shopping cart

Items you add to your cart are saved only in your own browser (local storage) so that your cart is still there when you return. This data is not sent to us. You can delete it at any time by emptying your cart or clearing your browser data.

Legal basis: § 25(2) TDDDG (strictly necessary to provide the cart you requested).

4. Placing an order and payment

When you check out, you are taken to our payment provider (for example Stripe, PayPal, Lemon Squeezy or Gumroad), which processes your name, email address, billing address, payment details and the products ordered to complete the payment and deliver your download. The provider acts under its own privacy policy. We receive the order details, but never your full card details.

If you send us an order request by email, we process the information in your email to prepare your order and send you a payment link.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract). We are legally required to keep invoices and order records for up to 10 years under German commercial and tax law (§ 147 AO, § 257 HGB). Legal basis: Art. 6(1)(c) GDPR.

5. Digital delivery

Your download link is sent to the email address you provide at checkout, either by the payment provider or by us.

Legal basis: Art. 6(1)(b) GDPR.

6. Contacting us

When you contact us by email or through the contact form, we process your name, email address, order number (if given) and your message in order to answer you. We delete this data once your request has been fully handled, unless we are legally required to keep it.

Legal basis: Art. 6(1)(b) GDPR for questions about an order or purchase, otherwise Art. 6(1)(f) GDPR.

7. Newsletter

If you subscribe to our newsletter, we use your email address to send you information about new products and offers. You can unsubscribe at any time using the link in every email or by writing to us. We then delete your address from the mailing list.

Legal basis: your consent, Art. 6(1)(a) GDPR.

8. Cookies and tracking

This website does not use tracking, analytics or advertising cookies. The only data stored on your device is your shopping cart, as described in section 3.

9. Fonts and icons

Our website loads fonts from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and icons from cdnjs (Cloudflare, Inc., USA). To do this, your browser connects to their servers, which transmits your IP address. Transfers to the USA are based on the EU-U.S. Data Privacy Framework and/or EU standard contractual clauses.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a consistent and fast presentation of the website).

10. How long we keep data

We keep personal data only as long as necessary for the purposes described above. Order and invoice data is kept for the statutory retention periods (up to 10 years). Newsletter data is kept until you unsubscribe. Contact requests are deleted once resolved.

11. Your rights

You have the right to:

  • access the personal data we hold about you (Art. 15 GDPR)
  • have incorrect data corrected (Art. 16 GDPR)
  • have your data deleted (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • receive your data in a portable format (Art. 20 GDPR)
  • object to processing based on legitimate interest (Art. 21 GDPR)
  • withdraw any consent at any time, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, email dantas.mirandasa@atomicmail.io.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.