Privacy policy

Last updated: 28 Oct 2026 · applies to the website redraftlabs.com and the Lowmark browser extension. The German version is legally binding.

1. Controller

Redraft Labs, owner: Stephan Liedtke
Kronenstr. 51c, 70174 Stuttgart, Germany
E-mail: privacy@redraftlabs.com

2. In short

3. Website

Hosting: Website and server are operated by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany; data stays in Germany. When you visit, the host processes technically necessary data such as IP address, time, requested page and browser information in server log files to deliver the site and protect it from attacks (legitimate interest, Art. 6(1)(f) GDPR). A data processing agreement with the host is in place.

E-mail: If you write to us, we process your message and address to reply (Art. 6(1)(b) or (f) GDPR) and delete them when no longer needed.

Contact form: Name (optional), e-mail address and message are forwarded to us by e-mail via our server (see hosting). The server does not store the message; for abuse protection a daily-rotating salted hash of your IP address is kept for at most two hours. We use the details only to reply (Art. 6(1)(a) and (b) GDPR) and delete the e-mail when no longer needed.

4. Lowmark browser extension

Data: On product pages of supported shops, Lowmark reads the product URL, title, image URL, price, shipping cost (if shown), currency, availability and the time of observation, plus your settings and alert rules.

Where: In IndexedDB / chrome.storage.local in your browser profile. Without your consent (see section 5) nothing is transmitted to anyone, including Redraft Labs.

Network access: For watched products, Lowmark fetches the product page directly from the shop at your chosen interval – without cookies. The shop sees a page request from your IP address like a normal visit. Product images in the watchlist load from the shop’s servers. The long-term history link and the “Support” link (Ko-fi) open an external site only when you click them; Lowmark sends no data. Payments via Ko-fi are subject to Ko-fi’s privacy policy.

Not done: no tracking, analytics, ads, affiliate links or sale of data, no access to sites other than enabled shops.

Your control: export (JSON/CSV) and “Delete all data” in the settings; uninstalling removes all data; you can revoke shop permissions at any time.

5. Community price pool (optional, beta)

The pool is off by default and consists of two separate switches in the settings. Share prices anonymously: Lowmark sends, bundled about every 10 minutes, the product ID, price, currency, availability, time and an anonymous per-product identifier derived from a random secret stored only in your browser, so reports cannot be linked across products. No account, no user ID. Load community history: Lowmark asks our server for the history of the product you view – automatically if you enable it, otherwise only when you click “Load community history”.

Server: our server at ALL-INKL in Germany (see section 3). Our database stores no IP addresses; for abuse protection a daily-rotating salted IP hash is kept for at most two hours. Price reports are deleted after 400 days at the latest. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by switching it off; unsent reports are discarded immediately. Lowmark Pro (prepared): license keys you enter are sent to our server for verification and stored only as a hash.

6. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). Contact privacy@redraftlabs.com. You may also lodge a complaint with a data protection authority.

7. Changes

If Lowmark gains features that process data differently (e.g. an optional Pro version with a server), we will update this policy beforehand.