Privacy

Updated 1 October 2026

Who is responsible

Kurcz Software GmbH, 06 eßartsreiamdiW, tragttutS 76507, Germany. Email moc.erawtfoszcruk@olleh. This page covers createavataaars.com. Your Kurcz account is shared with the other Kurcz apps; the Kurcz privacy policy covers it in full.

What we process

• Making an avatar without an account: nothing is stored on our side. The avatar lives in the page address.
• Free downloads and shares: your browser keeps a count of today’s free downloads and shares, and the codes of those avatars. It stays on your device. If you sign in, those avatars are added to My avatars.
• Your account: your email address, used to sign you in with a code or link.
• My avatars: the codes of the avatars you downloaded or shared.
• API waitlist: your email address and the optional note you leave.
• Product news: your email address, if you tick the box.
• Usage counts: pages viewed and actions such as downloads, without cookies. Linked to your account only while you are signed in.
• Rate limits: your IP address, held in a counter that expires within 24 hours.

Why

• Account, My avatars and the free-download count: to provide the service you ask for (Art. 6(1)(b) GDPR).
• API waitlist and product news: your consent (Art. 6(1)(a) GDPR). Withdraw it at any time.
• Usage counts and rate limits: our legitimate interest in running and protecting the site (Art. 6(1)(f) GDPR). You may object.

Cookies

No cookies for analytics or advertising. Only the storage needed to keep you signed in and to count today’s free downloads.

Who processes it for us

Convex (database, EU), Vercel (hosting), PostHog EU Cloud (usage counts) and Resend (sign-in email). Each works under a data processing agreement.

How long

• Account and My avatars: while your account exists. Remove avatars at any time.
• API waitlist: until we email you that the API exists, or until you ask us to delete it.
• Product news: until you unsubscribe.
• Usage counts: up to one year.
• Rate-limit counters: up to 24 hours.
• Shared links contain no personal data and keep working.

Your rights

You may access, correct, delete, restrict or port your data, withdraw consent and object to processing. Remove your avatars on the account page, delete your whole Kurcz account at kurczsoftware.com/account, or write to moc.erawtfoszcruk@olleh. You may also complain to a data protection authority, such as the one for Baden-Württemberg (LfDI).