Privacy Policy

Last updated: 4 November 2026

This privacy policy explains which personal data we process when you visit our websites, use our free tools, contact us or buy from us, why we do so and which rights you have under the EU General Data Protection Regulation (GDPR) and the German data protection laws.

1. Controller

The controller responsible for data processing on our websites is:

Dennis Josek
Paul-Robeson-Straße 49
10439 Berlin
Germany
Email: hi@dennn.is

We are not required to appoint a data protection officer. For any question about this policy or your data, write to hi@dennn.is.

2. Scope

This policy applies to all websites operated by Dennis Josek, including sleekwp.com, blockstudio.dev, inline0.com, dennn.is, oneclick.pro, kickstartui.com, the OneClick Pro tool websites and the inline0 open source documentation websites. We sell our products on sleekwp.com ourselves; Blockstudio Plus is sold on our behalf by a merchant of record. Sections marked (sleekwp.com) only apply to sleekwp.com, and sections marked (blockstudio.dev) only to blockstudio.dev.

3. Hosting and server log files

Our websites run on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in data centres in Germany. We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.

Every time you open one of our pages, the server automatically records technical information that your browser transmits: your IP address, the date and time of the request, the requested address, the referring page, the HTTP status code, the amount of data transferred and the browser and operating system you use (user agent). We need this data to deliver the website, to keep it stable and secure and to detect and defend against attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and reliable operation of our websites. Log files are deleted after 14 days at the latest unless a security incident requires us to keep individual entries for longer to clarify it.

4. Content delivery and security (Cloudflare)

We use the content delivery network and security services of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. All requests to our websites pass through Cloudflare's network, which caches our pages, delivers them quickly worldwide and protects our servers against attacks and abuse. In the process Cloudflare processes your IP address, the requested address, the user agent and further technical request data. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in fast, available and secure websites.

We have concluded a data processing agreement with Cloudflare. Cloudflare is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has issued an adequacy decision (Art. 45 GDPR); in addition, the EU Standard Contractual Clauses apply. More information: cloudflare.com/privacypolicy.

5. Cookies and local storage

We do not use cookies for advertising or for analytics, and we do not use any third-party tracking services. We only store information on your device, or read it from there, where this is strictly necessary to provide a service you have expressly requested (§ 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG), or where a section below says otherwise:

Login and account (sleekwp.com and blockstudio.dev). When you log in, WordPress sets session cookies (wordpress_logged_in_*, wordpress_sec_*) so that you stay logged in. They are deleted when you log out or after they expire.
Cart and checkout (sleekwp.com). Easy Digital Downloads sets cookies such as edd_items_in_cart and a session cookie so that your cart and checkout work. They expire after your session or after a few days.
Payment and fraud prevention (sleekwp.com). On the checkout page our payment provider Stripe sets the cookies __stripe_mid and __stripe_sid, which are necessary to process payments securely and prevent fraud (see section 10).
Affiliate referrals (sleekwp.com). If you reach sleekwp.com through an affiliate link, we first ask whether we may store a referral cookie. Only if you click "Allow" do we set the cookies affwp_ref, affwp_ref_visit_id and affwp_campaign, which record which affiliate referred you, so that we can pay the affiliate a commission if you buy. The legal basis is your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). The cookies expire after 30 days; you can withdraw your consent at any time by deleting them in your browser. If you decline, nothing is stored and the affiliate receives no commission (see section 14).
Display preference. If you choose light or dark mode, your browser stores this choice in its local storage under i0-theme-mode. It never leaves your device.

You can delete cookies and local storage at any time in your browser settings and block cookies in general. If you block strictly necessary cookies, logging in and buying will not work.

6. Privacy-friendly statistics (SleekTrack)

To understand which pages are read, we use SleekTrack, our own analytics software, which runs on our own servers. SleekTrack does not set cookies, does not use local storage and does not store any information on your device. It records the page you view, the referring website, the type of browser, operating system and device and the time of the visit. To count unique visitors per day, your IP address and user agent are combined with a random value that changes every day and turned into a one-way hash; the random value is deleted after the day ends and your IP address itself is never stored. As a result we cannot identify you or follow you across days or across websites. The data is not passed on to third parties. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in improving our websites on the basis of anonymous statistics.

7. Fonts and scripts

We host all fonts, icons and scripts of our websites on our own servers. Your browser does not connect to Google Fonts or other external font or script services when you visit our pages. The only exception is the payment form on sleekwp.com, which loads scripts from our payment providers (see section 10). The checkout of Blockstudio Plus takes place on a page of its merchant of record (see section 11).

8. Contacting us

If you contact us by email, we process your email address, your name if provided and the content of your message in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract or its preparation, and Art. 6 (1) (f) GDPR otherwise; our legitimate interest lies in answering enquiries. We delete the correspondence when it is no longer needed, unless statutory retention periods apply.

9. Free online tools

On oneclick.pro, kickstartui.com and the OneClick Pro tool websites you can use free tools such as converters, formatters, validators and generators. What you enter into a tool is sent to our server, processed only to calculate the result and not stored afterwards. Some tools, such as the DNS record, SSL certificate, WHOIS and domain availability checkers, query public internet services (DNS servers, certificate endpoints and domain registries) for the domain you enter. Please do not enter personal data of yourself or others into the tools. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing the tools you request.

10. Customer account, purchases and payment (sleekwp.com)

When you buy a product on sleekwp.com, we process your name, email address, billing address, country, VAT identification number if provided, your order and payment status, your licence keys and your download history. When you create a customer account, we also process your login details. We need this data to conclude and fulfil the contract, to deliver your downloads and licence keys, to provide support and to issue invoices (Art. 6 (1) (b) GDPR), and to comply with tax and commercial law obligations (Art. 6 (1) (c) GDPR).

Payment. Payments are processed by our payment providers, who receive the payment data you enter directly. We do not see or store your full card or account details.

Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland, for card payments and other payment methods offered in the checkout. Stripe processes your payment data and technical data about your device and connection to prevent fraud. More information: stripe.com/privacy.
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, if you choose to pay with PayPal. More information: paypal.com/privacy.

The legal basis is Art. 6 (1) (b) GDPR, and for fraud prevention Art. 6 (1) (f) GDPR; our legitimate interest lies in preventing payment fraud. Stripe and PayPal may also process data as independent controllers to meet their own legal obligations, for example under anti-money laundering law.

VAT. To charge the correct VAT, we determine your country from your billing address and, where required, from your IP address. If you enter a VAT identification number, we verify it with the European Commission's VIES system through the service VAT Sense. The legal basis is Art. 6 (1) (c) GDPR in conjunction with EU and German VAT law.

Retention. We keep your account and order data for as long as your account exists or as long as you hold an active licence. Invoices and accounting records are retained for the periods required by German commercial and tax law (§ 147 AO, § 257 HGB, currently up to ten years); during this time the data is blocked for any other use.

Withdrawal form. If you withdraw from a contract with the withdrawal function on sleekwp.com/withdrawal/, we process your name, email address, order number and the time of receipt to process the withdrawal, send you a confirmation of receipt and refund your payment (Art. 6 (1) (c) GDPR in conjunction with §§ 356a and 357 BGB). We keep these details for as long as the statutory retention periods for the order require.

11. Blockstudio Plus account, purchases and payment (blockstudio.dev)

Blockstudio Plus is sold on our behalf by a merchant of record, which is named at checkout and on your receipt: the Stripe affiliate that appears as "Sold through Link" (currently Sold through Link, LLC, formerly Lemon Squeezy LLC), whose payments are processed by Stripe's payment affiliates, in Europe Stripe Technology Europe, Limited, Ireland, through Stripe Managed Payments. Purchases made on plus.blockstudio.dev before 4 November 2026 were sold by Polar Software, Inc., USA ("Polar"), which remains the merchant of record for those orders.

Checkout. When you start a purchase, we send the merchant of record the product and, if you are signed in, your email address and your user ID with us, so that the purchase is assigned to your account. You then enter your email address, name, billing address, country and payment details on the checkout page of the merchant of record. It processes this data, together with technical data about your device and connection, to complete the payment, to calculate and remit taxes, to prevent fraud, to send receipts and invoices and to provide order support. It does so as an independent controller under its own privacy policy; more information: polar.sh/legal/privacy-policy and stripe.com/privacy. The legal basis for the data we send is Art. 6 (1) (b) GDPR.

Orders and access. After a payment, the merchant of record informs us of the purchase. We receive and store your email address, name and country, the order number, the amount, currency and tax of the order, its payment, refund and dispute status and the merchant of record's references of the customer and the payment; we do not receive your full card or account details. We use this data to create your account, to grant and check your access to the Plus downloads and the members' Discord server, to answer your requests and to handle refunds and disputes (Art. 6 (1) (b) GDPR). The order records are stored in our own database on our servers at Hetzner (see section 3).

Account. Your Plus account is a user account on blockstudio.dev. We process your email address, your name if provided and your login details: a password if you set one, or a one-time sign-in code or link that we send to your email address. If you bought Blockstudio Plus on plus.blockstudio.dev before it moved to blockstudio.dev, we transfer your account (email address, name and, where you set a password, its encrypted hash) and your purchases from the previous service providers to blockstudio.dev, so that you keep your access (Art. 6 (1) (b) GDPR).

Discord. If you connect your Discord account in your Plus account, Discord (for users in the European Economic Area Discord Netherlands BV, otherwise Discord Inc., USA) asks you to allow us to read your Discord identity and to add you to our Discord server. We then store your Discord user ID, your Discord username and the time of the connection with your account, add you to the server and give you the Plus members' role there. We use this data only to grant and keep your access to the members' server (Art. 6 (1) (b) GDPR). When you disconnect Discord, or when your access to Plus ends, we remove the role and delete the stored Discord user ID and username. On Discord itself, Discord's privacy policy applies: discord.com/privacy.

Retention. We keep your account and order data for as long as your account exists or as long as you have access to Blockstudio Plus. The merchant of record keeps its own transaction records for the periods that apply to it.

12. Transactional email (Postmark)

We send emails related to your purchase and account on sleekwp.com, such as order confirmations, invoices, licence keys, download links and password resets, through Postmark, a service of ActiveCampaign, LLC, 1 North Dearborn Street, 5th Floor, Chicago, IL 60602, USA. Postmark processes your email address, the content of the email and delivery data (for example, whether an email was delivered). The legal basis is Art. 6 (1) (b) GDPR. We have concluded a data processing agreement with ActiveCampaign. ActiveCampaign is certified under the EU-U.S. Data Privacy Framework; in addition, the EU Standard Contractual Clauses apply. More information: postmarkapp.com/eu-privacy.

13. Licence checks and updates of our plugins (sleekwp.com)

When a SleekWP plugin installed on your website activates its licence or checks for updates, it sends the licence key, the address of the website, the product and its version and the versions of WordPress and PHP to sleekwp.com; our server also receives the IP address of the website's server. We use this data to validate the licence, to manage the number of activated websites and to deliver updates. The legal basis is Art. 6 (1) (b) GDPR. Activation records are kept as long as the licence exists.

14. Affiliate programme (sleekwp.com)

We run our affiliate programme ourselves with the software AffiliateWP on our own servers. If you visit sleekwp.com through an affiliate link and allow the referral cookie described in section 5, we record the referring affiliate, the visit (including the landing page, the referring address and an IP address that is used to detect fraud) and, if you buy, the order and the resulting commission. The legal basis is your consent (Art. 6 (1) (a) GDPR); the fraud check is based on Art. 6 (1) (f) GDPR, our legitimate interest in remunerating our partners correctly. If you decline, we record nothing. Referral visits are deleted after 12 months unless they led to a purchase.

If you join the programme as an affiliate, we process your name, email address, website, payment email address and your referral and commission data to run the programme and pay you (Art. 6 (1) (b) GDPR). Commission payments are made via PayPal.

If you subscribe to our newsletter, we use your email address to send you news about our products. We only send the newsletter after you have confirmed your subscription by clicking the link in a confirmation email (double opt-in). We log the time of your subscription and confirmation and the IP address used, to be able to prove your consent. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 7 (2) of the German Unfair Competition Act (UWG). You can withdraw your consent at any time with the unsubscribe link in every newsletter or by email; this does not affect the lawfulness of processing before the withdrawal.

We send the newsletter through MailerLite, a service of MailerLite Limited, Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593, Ireland, with which we have concluded a data processing agreement. MailerLite may record whether newsletters are opened and which links are clicked; we use this only in aggregated form. After you unsubscribe we keep your email address on a blocklist for as long as necessary to prove that we respect your objection, and delete it otherwise. More information: mailerlite.com/legal/privacy-policy.

16. Links to other websites

Our websites link to other websites, such as GitHub, social networks and the websites of other providers. Only when you click such a link does your browser connect to that website; from then on the privacy policy of its operator applies.

17. Transfers to third countries

Where data is transferred to countries outside the European Economic Area, in particular to the USA, this happens only on the basis of an adequacy decision of the European Commission (Art. 45 GDPR), in particular the EU-U.S. Data Privacy Framework, or on the basis of the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR).

18. Obligation to provide data and automated decisions

You are not obliged to provide personal data. Without the data marked as required in the checkout we cannot conclude a contract with you. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

19. Your rights

You have the right to:

obtain access to the personal data we process about you (Art. 15 GDPR);
have inaccurate data rectified (Art. 16 GDPR);
have your data erased (Art. 17 GDPR), unless we are legally required to keep it;
have the processing restricted (Art. 18 GDPR);
receive the data you provided to us in a structured, commonly used and machine-readable format (Art. 20 GDPR);
withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR). Where we process your data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can object to the use of your data for direct marketing at any time without giving reasons.

To exercise your rights, write to hi@dennn.is.

Right to lodge a complaint. You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin, Germany.

20. Security

Our websites use TLS encryption for all connections. We protect our systems with technical and organisational measures appropriate to the risk, such as access controls, regular updates and backups.

21. Changes to this policy

We update this policy when our websites, services or the law change. The current version is always available on this page.