Skip to content
EvenAuth

legal.lastUpdated: 2026-07-01

legal.section.privacy

Operated by EvenWorks. The full text lives on the main site.

Summary
Plain-language version of the binding policy.

EvenWorks is the data controller. Our DPO is reachable at dpo@evenworks.xyz.

We collect the minimum needed to run the service. Auth data (email, password hash, sessions, two-factor, passkeys) is stored on infrastructure we operate in Germany.

Our only subprocessor is Resend for transactional email and Paytiko for payment processing. Domains are registered through Spaceship. We do not use AWS, Google Cloud, Cloudflare, or any third-party CDN or DDoS service.

You have the right to access, rectify, erase, restrict, port, and object. Write to dpo@evenworks.xyz. We reply within five business days.