This policy explains what personal data Directory Assets ISLT UG ("we", "us") processes when you use the Directory Plus editor, the Directory Plus Figma plugin, and plus.directory (together, the "Service"), and the rights you have under the General Data Protection Regulation (GDPR). For the mockups.directory shop, the shop's own privacy policy applies.
The short version. We keep data collection minimal: your email for login, your subscription status for access, and billing handled by Stripe. Your artwork renders in your browser — we do not upload or store your designs. We use only essential cookies and run no advertising trackers.
Directory Assets ISLT UG, Friedrichstraße 155, 10117 Berlin, Germany — hi@mockups.directory. Full details in the Impressum.
| Data | Purpose | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Email address + one-time login codes | Account login (magic-link), service emails | (1)(b) contract |
Session cookie (dp_session, httpOnly, up to 30 days) | Keeping you signed in | (1)(b) contract |
| Subscription & purchase status | Knowing which mockups you can access | (1)(b) contract |
| Billing data (name, payment method, invoices) — held by Stripe, not stored on our servers | Payments, taxes, accounting | (1)(b) contract · (1)(c) legal obligation |
| Technical logs (IP address, timestamps) kept short-term by our hosting providers | Security, abuse and fraud prevention | (1)(f) legitimate interest |
Your content: the designs you place into mockups are processed locally in your browser to produce your renders. We do not receive, upload, or retain your artwork.
We use only cookies that are strictly necessary to operate the Service — primarily the dp_session login cookie. We do not use advertising or cross-site tracking cookies.
We share data only with the service providers needed to run the Service, under data-processing agreements:
Some providers process data outside the EU/EEA; where they do, transfers rely on adequacy decisions or EU Standard Contractual Clauses.
Account data is kept while your account is active and deleted or anonymised after closure, except where law requires longer retention (e.g. invoices and accounting records: up to 10 years under German HGB/AO). Login codes expire within minutes; technical logs are short-lived.
You have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent where processing is based on consent. Contact hi@mockups.directory — we respond within the statutory deadlines. You also have the right to lodge a complaint with a supervisory authority; ours is the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI).
We may update this policy as the Service evolves; material changes will be announced by email or in the Service. The current version always lives at this address.