Privacy

Updated 1 October 2026

Who is responsible

Kurcz Software GmbH, Widmaierstraße 60, 70567 Stuttgart, Germany. Email hello@kurczsoftware.com. This page covers createavataaars.com. Your Kurcz account is shared with the other Kurcz apps; the Kurcz privacy policy covers it in full.

What we process

• Making an avatar without an account: nothing is stored. The avatar lives in the page address.
• Your account: your email address, used to sign you in with a code or link.
• My avatars: the codes of the avatars you downloaded or shared.
• API waitlist: your email address and the optional note you leave.
• Product news: your email address, if you tick the box.
• Usage counts: pages viewed and actions such as downloads, without cookies. Linked to your account only while you are signed in.
• Rate limits: your IP address, held in a counter that expires within 24 hours.

Why

• Account and My avatars: to provide the service you ask for (Art. 6(1)(b) GDPR).
• API waitlist and product news: your consent (Art. 6(1)(a) GDPR). Withdraw it at any time.
• Usage counts and rate limits: our legitimate interest in running and protecting the site (Art. 6(1)(f) GDPR). You may object.

Cookies

No cookies for analytics or advertising. Only the storage needed to keep you signed in.

Who processes it for us

Convex (database, EU), Vercel (hosting), PostHog EU Cloud (usage counts) and Resend (sign-in email). Each works under a data processing agreement.

How long

• Account and My avatars: while your account exists. Remove avatars at any time.
• API waitlist: until we email you that the API exists, or until you ask us to delete it.
• Product news: until you unsubscribe.
• Usage counts: up to one year.
• Rate-limit counters: up to 24 hours.
• Shared links contain no personal data and keep working.

Your rights

You may access, correct, delete, restrict or port your data, withdraw consent and object to processing. Remove your avatars on the account page, delete your whole Kurcz account at kurczsoftware.com/account, or write to hello@kurczsoftware.com. You may also complain to a data protection authority, such as the one for Baden-Württemberg (LfDI).