Legal

Privacy Policy

Remake values your privacy and complies fully with the EU General Data Protection Regulation (GDPR). Every section below shows the formal wording next to a plain language summary.

Effective October 19, 2025 · Last updated May 14, 2026

1. Zero Tracking Cookies Policy

We believe in a tracker-free internet. Remake does not use tracking cookies, third-party advertising cookies, or behavioral profiling scripts. The only cookies we use are strictly technical, essential session cookies required to keep you securely logged into your dashboard.

In plain terms

No tracking cookies, no ad retargeting, no cross-site profiling.

2. Data We Collect & Minimize

We collect only the absolute minimum information required to operate the service securely:

  • Account Info: your email address and account credentials.

  • Payment Info: handled entirely by our secure Merchant of Record, Creem. Remake never sees, accesses or stores your credit card details or bank information.

  • Usage Analytics: privacy-friendly, fully anonymized metrics with masked IP addresses to monitor server health.

In plain terms

We collect as little personal data as possible.

3. Strict EU Data Storage

All servers, databases and backup systems are strictly located within the European Union (EU). Your personal data and website assets never leave the EU, ensuring they remain under the continuous protection of European privacy laws.

In plain terms

Everything stays safely inside Europe.

4. Your End-Users' Data (Data Processing)

If you build a website using Remake that collects personal data from your visitors (such as through a contact form or newsletter sign-up), you are legally the "Data Controller" of that information, and Remake acts strictly as your "Data Processor."

You are responsible for ensuring your website complies with applicable privacy laws and includes any legally required notices or policies. We will only process your end-users' data to provide the hosting service to you, and we will never use or sell that data for our own purposes.

In plain terms

If your website collects visitor data, you are responsible for it. We just securely host it.

5. Legal Basis for Processing

Data is processed under:

  • Article 6(1)(b): to perform our contract with you.

  • Article 6(1)(f): our legitimate interest in maintaining system stability, applying security protections and preventing fraud.

In plain terms

We only process your data to run the service and keep it safe.

6. Government and Third-Party Data Requests

We defend your privacy. We will never disclose your personal information to government agencies, law enforcement or third parties unless legally required to do so by a binding court order or applicable law. If legally permitted, we will notify you promptly about such requests before disclosure.

In plain terms

We protect your data from outside requests whenever legally possible, and we'll notify you if we can.

7. Data Security & Breach Notification

To safeguard your information, we use modern industry-standard protections including encrypted connections (SSL/TLS), encryption at rest for databases, strict access controls and active monitoring. While no platform can guarantee absolute security, we commit to continuously improving our protections and responding rapidly to threats.

If we become aware of a personal data breach affecting your information, we will notify affected users and relevant authorities as required under GDPR and applicable law.

In plain terms

We use strong security practices and will tell you if a serious data breach affects your information.

8. Data Sharing and Sub-Processors

We never sell, trade or rent your personal data. Data is only shared with infrastructure providers and operational sub-processors (such as our EU hosting provider and Creem, our Merchant of Record) under signed Data Processing Agreements that require equivalent privacy protections.

In plain terms

Your data is only shared with the partners that keep the service running, under strict agreements.

9. Data Retention

Personal data is retained only while your account is active or as legally required for billing or compliance purposes. When you delete your account, we erase personal data from our active systems within 30 days.

In plain terms

When you delete your account, your personal data is removed within a month.

10. Your GDPR Rights

Under GDPR, you have the right to access, correct, export, restrict, object to processing of, or permanently delete your personal data. To exercise these rights, email us at hello@remake.dev. We will respond within 30 days.

In plain terms

You stay in control of your data.

11. Transparent Changes to This Policy

If we make material changes to how we handle or process personal data, we will notify you at least 30 days in advance via email or dashboard notice. We also maintain a public archive of previous policy versions for transparency.

In plain terms

We will warn you before important privacy changes and keep old versions publicly accessible.

12. Contact

For privacy questions or GDPR requests, email hello@remake.dev.

In plain terms

We reply personally.

Remake

A website builder that works like a document. CMS, forms and EU hosting included.

Resources

© 2026 Remake. All rights reserved.