We want to be transparent about how we handle your data. This privacy policy explains what information we collect, why we collect it, and what your rights are. We've tried to keep this readable and honest – no walls of legalese.
This policy applies to our website at magicpages.co and the Magic Pages hosting service.
Last updated: 1 March 2026
Who We Are
Magic Pages is operated by:
Jannis Fedoruk-Betschki
"Magic Pages"
Wiesingerstraße 2
4820 Bad Ischl
Austria
Email: [email protected]
We are the data controller for the personal data described in this policy, as defined by the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz, DSG).
What Data We Collect and Why
When You Visit Our Website
When you browse magicpages.co, we collect basic usage data through Rybbit, a self-hosted, privacy-focused analytics tool running on our own infrastructure. This means your analytics data never leaves our servers and is not shared with any third party. Rybbit does not use cookies and does not collect personally identifiable information. We use this data to understand how our website is used and to improve it.
Our website is served through Cloudflare, which acts as our DNS provider and content delivery network (CDN). Cloudflare may process technical data such as your IP address and request metadata to deliver the website to you and to protect against malicious traffic. This processing is necessary for our legitimate interest in operating a secure and performant website. For details, see Cloudflare's privacy policy.
When You Subscribe to Our Newsletter
If you sign up for our newsletter through the built-in Ghost membership feature, we collect your email address and name. We use Mailgun as our email delivery service to send newsletters and transactional emails. Your email address is shared with Mailgun solely for the purpose of delivering these emails. For details, see Mailgun's privacy policy.
Legal basis: Your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.
When You Create an Account and Use Our Service
When you sign up for Magic Pages, we collect your email address and name.
When you subscribe to a paid plan, payments are processed by Paddle, our merchant of record. Paddle collects the data necessary to process your payment directly, which may include your name, billing address, payment information, VAT number, and other details required for the transaction. We do not store your payment details. Paddle handles this as an independent data controller. For details, see Paddle's privacy policy.
We use Retain by ProfitWell (a product offered by Paddle) to analyse subscription metrics such as churn and revenue. This service processes your email address, a user identifier, and usage data to help us understand and improve our business.
Legal basis: Performance of our contract with you (Art. 6(1)(b) GDPR), and our legitimate interest in operating and improving our service (Art. 6(1)(f) GDPR).
When You Come Through Our Affiliate Program
We use Partnero to run our affiliate program. If you arrive at our website through an affiliate link, Partnero may set a cookie to track the referral. This data is used to attribute sign-ups to the referring affiliate. For details, see Partnero's privacy policy.
Legal basis: Our legitimate interest in running an affiliate program (Art. 6(1)(f) GDPR).
When You Contact Us
If you email us or reach out via any other channel, we process the data you provide (typically your name and email address) to respond to your inquiry.
Legal basis: Our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR), or performance of a contract (Art. 6(1)(b) GDPR) if your inquiry relates to our service.
Hosting and Infrastructure
Your data is hosted on servers provided by Hetzner Online GmbH, located in the European Union. Hetzner acts as our data processor. For details, see Hetzner's privacy policy.
Cookies
We use a minimal number of cookies:
- Essential cookies: Ghost sets a session cookie when you log in as a member. This is necessary for the website to function and does not require consent.
- Consent cookie: Since we use a cookie consent banner, a cookie is stored to remember your consent preferences. This is also a necessary, functional cookie.
- Affiliate tracking cookie: Partnero may set a cookie when you arrive via an affiliate link.
We do not use advertising cookies. Our analytics tool (Rybbit) does not use cookies.
Third-Party Services Overview
| Service | Purpose | Data Processed | Location |
|---|---|---|---|
| Hetzner | Hosting & infrastructure | All service data | EU (Germany) |
| Cloudflare | DNS & CDN | IP address, request metadata | Global (EU-adequate) |
| Paddle | Payment processing | Billing & payment data | UK/EU |
| Mailgun | Email delivery | Email address | EU/US |
| Retain (ProfitWell) | Subscription analytics | Email, user ID, usage data | US |
| Partnero | Affiliate tracking | Referral & cookie data | EU |
| Rybbit | Website analytics | Anonymized usage data | Self-hosted (EU) |
Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.
How Long We Keep Your Data
- Account data: For as long as your account is active, and for a reasonable period afterward to comply with legal obligations (such as tax and accounting requirements under Austrian law).
- Email/newsletter data: Until you unsubscribe.
- Payment data: Retained by Paddle in accordance with their retention policy and applicable tax laws.
- Analytics data: Rybbit data is aggregated and does not contain personal data.
- Communication data: Emails and support inquiries are kept for as long as necessary to resolve your request, and may be retained for a reasonable period for quality and legal purposes.
Your Rights
Under the GDPR and the Austrian DSG, you have the following rights:
- Access: You can request a copy of the personal data we hold about you.
- Rectification: You can ask us to correct inaccurate data.
- Erasure: You can ask us to delete your personal data, subject to legal retention obligations.
- Restriction: You can ask us to restrict processing of your data in certain circumstances.
- Data portability: You can request your data in a structured, machine-readable format.
- Objection: You can object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on your consent (e.g., newsletter), you can withdraw it at any time.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
Changes to This Policy
We may update this privacy policy from time to time. When we make significant changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email. We encourage you to review this policy periodically.
Questions?
If you have any questions about this privacy policy or how we handle your data, reach out to us at [email protected]. We're happy to help.
Last updated: 01 March 2026
