Privacy Policy

Last updated: 10 November 2026. This notice describes how David Mendez, trading as Crispmill, handles personal data for the website https://crispmill.com and the Crispmill extensions.

1. Who is responsible

The data controller is David Mendez, an individual based in Buenos Aires, Argentina, trading as Crispmill.

Privacy contact: support@crispmill.com.

We sell to customers in many countries, including the United States and the European Union. Where a law such as the EU or UK GDPR applies to you, we honor those rights even though we are established in Argentina.

We have not published a street address. David Mendez is based in Buenos Aires, Argentina, and a postal address is not included on this page yet. If a regulator, Paddle, or the law requires a registered postal address, we will add it here. Until then, write to the privacy contact above.

2. What this policy covers

It covers the Crispmill marketing website, our Chrome and Edge extensions, and related services such as scheduled digests. As of 10 November 2026, Send to Reader by Crispmill has not been released. This notice describes how the website works today and how the extension is designed to work when it is available.

Payment data for paid plans will be processed by Paddle, the Merchant of Record, when checkout opens. Paddle has its own Privacy Notice.

3. Data we collect, and why

3.1 Free extension — stored on your device

The free version does not require an account. Settings, preferences, and documents you generate are stored locally in the extension or as files you download. We do not receive your article content or your e-reader address from the free version, and we do not create a user account for it.

If we later add optional anonymous usage metrics (for example, a count of clicks on a paid-plan button), we will update this policy before that data is sent to us, and we will not include article content in those metrics.

Legal basis, where GDPR applies: the processing on your device is at your request to provide the service (contract), or our legitimate interest in remembering your settings.

3.2 Website contact

If you email us, we process the address you use, the message, and any details you include, so we can reply and keep a record of the conversation. Legal basis: legitimate interests, or contract if you are an existing customer, or consent where required.

3.3 Pro+ scheduled digests — stored on our server

Scheduled daily or weekly digests cannot run only on your device, because they have to be built and sent even when your browser is closed. If you use Pro+, we store on a server:

We use this data only to provide the digest service, prevent abuse, and support you. Legal basis: performance of the contract.

3.4 Payments, handled by Paddle

If you buy Pro or Pro+, Paddle.com processes the transaction as Merchant of Record. Paddle may collect your name, email, payment method details, billing address, tax information, and transaction data. We do not receive or store your full payment card number. Paddle may share with us limited data we need to fulfill the order, such as your email, what you bought, and the status of the payment or subscription.

Legal basis: performance of the contract, and legal obligations related to tax and accounting. See Paddle’s Privacy Notice for how Paddle uses payment data.

3.5 Cookies and this website

This website is static. We do not set tracking cookies, and we do not use third-party analytics, advertising, or an embedded checkout today. The site does not show a cookie banner, because we do not set cookies of our own.

Our host processes technical connection data as described in section 3.6. If a hosting or security feature later sets a cookie, or if we add analytics, we will update this notice first and, where the law requires it, ask for consent.

When paid checkout opens, it will be Paddle Checkout. Paddle may then set cookies or similar technology that it needs to process the payment. That processing is described in Paddle’s notices.

3.6 Website hosting

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc. When you load a page, Cloudflare receives the technical data needed to serve it, including your IP address, the page you request, and ordinary browser details such as the user agent. That data is used to deliver the site and to keep it available. We do not add our own analytics on top. Where the GDPR applies, the legal basis is our legitimate interest in running a secure public website.

4. Who we share data with

We do not sell your personal data. We share it only as needed:

If you ask us to send a document to a third-party e-reader service (for example Amazon’s personal-document service), that provider processes the delivery address and document under its own terms and privacy policy. We are not responsible for that provider’s practices.

5. International transfers

We are based in Buenos Aires, Argentina. Paddle and other processors may be located in the United Kingdom, the European Economic Area, the United States, or other countries. Where a law such as GDPR requires a safeguard for a transfer, we rely on an adequacy decision where one exists, or on standard contractual clauses or an equivalent mechanism used by our processors.

6. Retention

Local extension data stays on your device until you delete it or uninstall the extension.

If you use Pro+, we keep server-side account and delivery data while the service is active and for a reasonable period after you cancel or delete it, so we can close the account, handle disputes, and meet tax or bookkeeping duties. Payment records retained by Paddle follow Paddle’s policies and the law.

Email correspondence is kept as long as needed to support you and document the relationship, then deleted or archived when no longer required.

7. Your rights

Subject to applicable law (including GDPR if it applies to you), you may have the right to:

To exercise these rights, email support@crispmill.com. We will respond within the time required by law (under GDPR, typically within one month). We may need to verify your request.

For payment data held only by Paddle, you may also need to contact Paddle at paddle.net or through the contact routes in Paddle’s Privacy Notice.

8. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

The Services are not directed at children under 16, and we do not knowingly collect personal data from them. If you believe we have, contact us and we will delete it.

10. Changes

We may update this policy as the product or the law changes. We will post the new version on this page with a new date. If a change is material, we will take reasonable steps to notify you.

11. Contact

David Mendez, trading as Crispmill, Buenos Aires, Argentina.

Email: support@crispmill.com

Website: https://crispmill.com