Legal · Updated August 28, 2026
Privacy Policy
1. Responsible person
manimedia Inh. Markus Nick
Hinterm Zaun 24, 76228 Karlsruhe, Deutschland
Email: info@file-recovery-hero.com
Telephone: +49 1577 7043630
2. Accessing the website and hosting
The website is hosted on servers operated by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you access the website, technically necessary log data may be processed, including your IP address, access time, requested resource, referrer, browser and operating system. This processing ensures secure and stable operation under Article 6(1)(f) GDPR. According to STRATO, IP addresses are stored for a maximum of seven days to detect and prevent attacks. The log files provided for access statistics contain anonymized IP addresses and are available for the past six weeks.
3. Cookies and local technologies
The File Recovery Hero website does not currently set any analytical, advertising or profiling cookies. There is therefore no consent banner for the page display. When switching to the externally hosted Stripe checkout, the technically necessary and, if necessary, other technologies described there apply.
When you visit the general homepage, your browser asks GeoJS for the country associated with your IP address to display a suitable language automatically. GeoJS receives your IP address and the connection data needed for this request. The request sends no cookies or address of the page you visited. We use only the country code, not your precise device location, and do not permanently store your language selection. If the service is unavailable, we use your browser language. Pages that are already translated do not trigger a country lookup. GeoJS uses the Cloudflare network.
4. Purchase via Stripe
Purchases use Stripe Managed Payments (“Sold through Link”). Sold through Link, LLC and participating Stripe entities process contact, billing, device and payment data for payments, tax handling and fraud prevention. We receive order references, payment status, amount, currency and the customer details needed for license delivery and contract administration, but no complete card data. Our processing is based on contract performance and legal obligations under Article 6(1)(b) and (c) GDPR. Information about Stripe entities, their responsibilities and international transfers is available in the Stripe Privacy Policy and the Link terms linked in checkout.
5. Order, license and proof of contract
We store the order ID, Stripe references, email address, total, currency, payment and fulfillment status, and the version and time of your consents to administer the contract and document the order. Customer data is generally retained for 365 days from collection; contact requests are retained for 365 days after resolution. Data is deleted earlier if its purpose and legal basis cease earlier. Exceptions cover the minimum license data needed for activation and use during the ten-year license term, and records subject to statutory retention. Depending on the record type, these include accounting vouchers for eight years, business correspondence for six years, and books or annual accounts for ten years, generally from the end of the relevant calendar year. Further retention applies only where legally required or necessary to establish, exercise or defend specific legal claims. Once those grounds cease, data is deleted or anonymized. The legal bases are Article 6(1)(b), (c) and (f) GDPR. This does not shorten the independent retention periods of Stripe/Link and hosting providers.
6. License activation
During activation, the license server processes the entered license key in hashed form, a device identifier generated by the app in hashed form, app version, time and activation status. By default, a license can be activated on up to two devices. To limit misuse, a hash derived from the network address that cannot be recalculated is briefly processed into rate limit data. The current technical configuration removes these entries after approximately one hour. The legal basis is Article 6 Paragraph 1 Letter b GDPR, supplemented by Article 6 Paragraph 1 Letter f GDPR to secure the license service.
When you use the online withdrawal function, we process your name, the contract information you provide and your email address. We store the statement with a receipt reference and UTC receipt timestamp in encrypted form on our server and send the acknowledgement and a notification to our contact address through STRATO. This processing serves contract administration and the legally required record under Article 6(1)(b) and (c) GDPR. The retention periods and exceptions for legally necessary records described above apply. No account, reason, card details or license key is required.
File Recovery Hero does not transfer photos, videos, audio files, file names, or folder contents to the license server during scanning and recovery.
7. License and Agreement Emails
After successful payment, we send the license key and order confirmation through the configured STRATO SMTP account. This involves processing the email address, subject, content and technical delivery data. The legal basis is Article 6(1)(b) GDPR. We process contact requests about the contract to address your request on the same basis or under Article 6(1)(f) GDPR. No voluntary technical support is offered.
8. Receiver
Recipients can be STRATO as a hosting and mail provider, Stripe as a payment service provider, as well as authorities or consultants if there is a legal obligation or this is necessary for legal defense. If necessary, contracts for order processing are concluded with service providers bound by instructions.
9. Your rights
In accordance with the GDPR, you have the right to information, correction, deletion, restriction of processing and data portability. You can object to processing based on legitimate interests based on your particular situation. Consent given can be revoked with effect for the future. You can also complain to a responsible data protection supervisory authority.
10. Security and Changes
Data transmitted between your browser and this website, and to the license server, is encrypted using HTTPS. Secret credentials and private keys remain on the server and are not sent to the browser. We update this policy when services, legal requirements or technical processes change.