Privacy Policy

This Privacy Policy explains how Sipers Mechatronics (eenmanszaak) ("we", "us") collects and uses personal data when you visit this website or purchase digital products related to the Mechams system.

The data controller is Sipers Mechatronics, a sole proprietorship (eenmanszaak) established in the Netherlands. Chamber of Commerce (KvK) number: 98949578. VAT ID: NL005363496B77. You can contact us at support@eyeball.engineering for general questions and for product and technical support. We aim to respond within one to three business days.

Data we collect

We only collect data that is necessary to operate this website, sell digital products, provide support, and run buyer-community features:

• Website usage data: When you visit the site, basic technical information such as IP address, browser type, device type, and pages visited may be logged by our hosting provider and by Sentry, our error and performance monitoring service. When something goes wrong, Sentry receives the technical context of the error together with a short trail of what happened just before it, which can include the pages you were on, elements you clicked or typed into, the addresses of requests the page made, and anything the page wrote to the browser console. Separately, on a sample of visits and whether or not anything goes wrong, Sentry receives performance data for page loads and in-app navigations, which includes the addresses of the requests and files those pages loaded. This helps us keep the website secure and find and fix faults.
• Optional analytics data: Only if you choose "Accept analytics", PostHog records how this website is used, such as pages viewed and actions taken, on its European servers. We also keep limited acquisition context (source, campaign, public landing page and an available link click identifier) for the browser session and pass it to Mechams links. Mechams retains it for checkout and the order only after you accept analytics there too. URL click identifiers are observed, not verified with an advertising provider; full referring URLs, arbitrary query parameters and email addresses are excluded. If you choose "Reject analytics", or make no choice at all, PostHog is never loaded and acquisition context is not retained. Your choice is stored in your own browser, and you can change it by clearing this site's stored data in your browser.
• Contact and support data: If you email us or create a support ticket, we receive your email address and the contents of your message. Support tickets may also include optional order references, printer details, and troubleshooting notes you provide.
• Purchase-related data: When you purchase a product, checkout and payment are handled by Stripe. We receive information from Stripe such as which product you bought, pricing, currency, billing country/address, tax IDs you provide, your email address, checkout consent records including terms acceptance, and the resulting invoice so we can provide support and maintain VAT/accounting records. We do not receive or store full payment card details; these stay with Stripe.
• Community access data: If you connect Discord access, we store the purchase email linked to your website session together with your Discord user ID and display name so we can grant or revoke the private buyer role. If you create a Launchpad profile or submission, we store the profile fields and asset links you provide. Public Launchpad pages are designed to show creator-facing profile information and approved public project links while keeping buyer emails private.

Legal bases under GDPR

We process personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Performance of a contract: To process and deliver your purchases, provide downloads, manage verified buyer access, and offer customer support.
• Legal obligation: To keep records for tax and accounting purposes as required under Dutch/EU law.
• Legitimate interest: To operate, maintain, and secure the website, including error and performance monitoring, understand basic usage patterns in an aggregated way, prevent abuse, and protect buyer-only community access.
• Consent: Where you explicitly opt in to optional analytics or optional communications, or voluntarily connect optional community features, which you can withdraw where technically and legally possible.

Third-party services

We rely on a small number of third-party services to run this website and deliver products:

• Vercel: Hosts the website. Vercel processes IP addresses and basic request data in order to serve pages.
• Stripe: Handles checkout, payment processing, VAT/sales-tax calculation, and invoicing. Stripe is an independent controller for the payment data it collects on its own platform.
• Sentry: Provides error and performance monitoring for the website and the account area. Sentry receives technical error and performance reports, which can include your IP address, browser, the pages you were on, the technical context of the error, a short trail of what happened just before it, and the addresses of requests the page made.
• PostHog: Provides optional product analytics on European servers. PostHog is loaded only after you choose "Accept analytics", and is not loaded at all otherwise.
• Google Workspace: Provides email hosting for our @eyeball.engineering and @sipersmechatronics.com addresses. Emails you send to us are stored and processed through this service.
• Resend: Sends transactional website emails and may deliver support ticket notifications to our support inbox.
• Telegram: If enabled for operations, support ticket notifications may be delivered to a private Telegram chat controlled by Sipers Mechatronics.
• Discord: If you choose to connect the private buyer Discord, Discord processes your Discord account information under its own terms and privacy policy. We use Discord identity data only to manage buyer-community access.
• External hardware suppliers: Some optional hardware links may point to third-party shops such as Amazon. Those shops process your visit and purchase under their own terms and privacy policies.

Cookies and tracking

This website does not use Google Analytics, Meta/Facebook pixels, TikTok pixels, or similar marketing-tracking cookies. Optional analytics stay off until you choose "Accept analytics"; that choice, and what PostHog keeps in your browser if you accept, are held in your browser's local storage and are never used for advertising. Error and performance monitoring by Sentry is not covered by that choice: it runs on every visit, because we cannot keep the site working without knowing when it breaks, and it is not used to profile you or to advertise to you. When you proceed to Stripe Checkout, Stripe may set its own cookies on its checkout domain for fraud prevention and session purposes.

Data retention

We retain personal data only for as long as necessary for the purposes described above or as required by law:

• Purchase and accounting data are typically stored for at least seven (7) years to comply with Dutch/EU tax and accounting obligations.
• Support and contact emails are stored for as long as reasonably necessary to handle your request and maintain a basic support history.
• Discord connection records are kept while needed to manage buyer access and revocation, unless deletion is legally required or technically necessary.
• Workshop profile/submission data is kept while the profile or submission remains active, unless removal is requested and legally possible.
• Technical logs and analytics data are retained for a limited period that is proportionate to security, troubleshooting, and performance needs.

Your rights

If you are located in the EU/EEA, you have rights with respect to your personal data, subject to applicable law: access, rectification, erasure in certain circumstances, restriction of processing, data portability where technically feasible, objection to certain processing, and withdrawal of consent where processing is based on consent.

To exercise these rights or ask questions about this policy, please contact us at support@eyeball.engineering.

You also have the right to lodge a complaint with your local supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), which can be contacted via autoriteitpersoonsgegevens.nl.