Privacy policy

What we collect

• Account: email, name and sign-in records.
• Orders: email, items, licence, amounts, tax details and Stripe payment references. Card details go to Stripe only.
• Emails we send you, such as receipts and download links.
• Messages, requests and commission briefs you send us.
• API keys you create and how many requests they make.
• Page views: path, country, device type and a visitor code made from your IP address and browser that changes every day. The IP address itself is not stored. Do Not Track and Global Privacy Control turn this off.

Why

To deliver what you buy and keep your account working (contract), to keep invoices and tax records (legal duty), and to keep the site secure and see which pages are useful (legitimate interest).

Cookies and local storage

Sign-in cookies keep you signed in. An anonymous cookie (ms-demand-session, 30 days) remembers your votes on requests. Your browser's local storage keeps your cart and display preferences. All are needed for the site to work, so there is no cookie banner.

Who processes it

Vercel (hosting), Neon (database and sign-in), Stripe (payments and tax), Resend (email) and Cloudflare (file delivery). Some are in the United States; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.

How long

Orders and invoices: as long as tax law requires, in Poland five years from the end of the tax year. Account data: until you delete the account. Messages: as long as needed to answer and follow up. Page-view counts cannot be linked back to you.

Your rights

You can ask to see, correct, export or delete your data, or object to its use, by writing to thraijuna@gmail.com. You can also complain to the Polish data protection authority (UODO) or the authority where you live.