Privacy

WindMit Writer on form1802.com. English product. Danish operator. Polar is the merchant of record. This is not legal advice.

Who is responsible

The controller for the job-sheet account is the WindMit Writer operator, Thomas Hansen, Denmark. There is no appointed data-protection officer and no DPO firm. Data-subject requests: [email protected] or the self-serve links below. Polar handles payment as merchant of record; Polar’s own privacy notice covers card data and invoices.

Dansk note til operatøren: du er dataansvarlig for konto, jobark og fotos. Polar er MoR for betaling. Resend sender bekræftelse og nulstilling af kodeord. Intet DPO-firma er udpeget.

What we store

• Account email and a password hash. We do not store the password itself. Optional inspector license number if you type one.
• A hashed confirmation or password link, until you use it or a newer message replaces it. Resend sees the email address long enough to deliver that message.
• Job-sheet drafts (unfinished answers and evidence photos) keyed to that email. Drafts are not a completed job and do not count toward the 12 jobs / month.
• Completed jobs: property address, owner contact, policy fields you typed, form answers, tagged evidence photos, and the PDFs we emitted.
• Quota counters (jobs, photo count, photo bytes) for the calendar month.
• Polar customer id and whether WindMit Writer access is on, plus period-end date when you cancel.
• A sign-in session cookie (wm_sess). Analytics choice is stored in this browser (localStorage), not as a tracking cookie we set before you decide.

Lawful basis

• Contract (GDPR Art. 6(1)(b)). Email sign-in, drafts, completed jobs, photos, PDFs, quota, and Polar entitlement so we can provide the $49/month job-sheet service you asked for.
• Legal obligation (Art. 6(1)(c)). Keeping enough record to answer an export or erasure request, and to show Polar that we asked them to cancel when you delete the account.
• Consent (Art. 6(1)(a)). Google Analytics on form1802.com. The tag loads with Consent Mode v2 and storage denied. Accept grants analytics storage in this browser without a reload. Reject leaves it denied. You can change that by clearing site data for form1802.com and answering the banner again.

What Polar stores

Polar is merchant of record. Polar stores the email you used at checkout, subscription status, invoices, tax, and payment-method tokens. We do not see or store card numbers. Polar’s terms and privacy notice apply to that processing. Canceling here asks Polar to cancel at period end. Deleting this account asks Polar to cancel if we can; Polar may still keep invoices as required for its own bookkeeping.

How long we keep it

• Drafts — until you delete that draft, emit PDFs (the draft is then removed), or delete the account. After the paid Polar period ends we stop new draft writes; existing drafts stay until you delete them or the account.
• Completed jobs, photos, PDFs — until you delete the account. Canceling the subscription does not delete them. Export still works after cancel and after the period ends.
• Sign-in codes — minutes, then deleted.
• Session — until you sign out or the browser drops the cookie.
• Analytics — only if you accepted; Google’s retention is Google’s.

Your rights

Export a JSON copy from Export my data (sign-in required). That includes email, completed jobs, and the draft list. One-time codes are not exported. Photos are listed (names and sizes); the binary files stay on the job until you download them from the job page or delete the account.

Cancel subscription is not erasure. It stops Polar renewals. Access stays on until the current period date. After that date: no new writes or PDFs; completed jobs remain.

Delete my account is full erasure on our systems: email, jobs, drafts, photos, codes, quota files, and local Polar entitlement. We also ask Polar to cancel if we can. This cannot be undone. To ask for restriction or objection, or if export/delete fails, email [email protected].

You may lodge a complaint with a supervisory authority. For the Danish operator that is Datatilsynet. If you are in another EEA state you may use your local authority.

Processors

• Hostinger — PHP + MySQL hosting and disk for this site. Shared hosting is not full-disk encryption we control. When WM_DATA_KEY is set on the server, new job payloads, draft fields, and new evidence files are encrypted at rest with that key. Existing PDFs stay as emitted (they are the file you download). The key is not in git.
• Polar — payments, subscriptions, customer portal, receipts.
• Resend — one-time sign-in emails from [email protected] when mail is configured.
• Google Analytics — visits. The tag loads with storage denied; cookies are used only after Accept grants analytics storage. IP anonymization is requested in the tag. No ads, no remarketing lists from us.

Those processors may handle data outside the EEA under their own terms and standard contractual clauses. We do not sell personal data. We do not run a second billing UI; Polar’s customer portal is Polar’s.

Cookies and analytics

Session cookie for sign-in. No ads. Google Analytics loads on each page with analytics and ad storage denied until you accept the banner. Reject leaves them denied. The measurement id can live in the server env. No search-volume or ranking numbers on this site.

Last updated 24 Sep 2026. A human lawyer should still review this if the product changes.