Privacy Policy

This policy explains what personal data Serenewally collects, why, and what you can do about it. The controller of this data is Zispidd (trade name Serenewally), Akkerwende 8, 6099 CV Beegden, the Netherlands, KvK 91978394, reachable at [email protected]. We keep it to the minimum needed to sell and deliver digital files.

What we collect

• Order details: your email address, name if you provide it, country, the sets you bought, amounts paid, tax and discount codes used.
• Gift details: the recipient's email, name and your message, if you send a set as a gift.
• Messages: what you send through the contact form or by email to support.
• Usage data: which pages are viewed, the site that referred you, and download activity, counted with an anonymous daily identifier rather than linked to your identity (see below).

We do not collect your postal address and never receive your card details: payment happens on Stripe's checkout page.

Why we use it

• To process your order, deliver downloads and send receipts (performance of the purchase contract).
• To let you log in and re-download your purchases (performance of the contract).
• To answer your questions (our legitimate interest and your request).
• To keep tax and accounting records (legal obligation).
• To understand which sets people look at and prevent abuse, using anonymous statistics (legitimate interest).

We do not sell your data, send marketing emails without your consent, or use advertising trackers.

Cookies and local storage

• Session cookie keeps you logged in to your account for up to 30 days after you log in.
• No tracking cookies. To count visitors, the server computes a one-way hash of your IP address and browser type with a random key that changes every day and is never stored. We keep only the hash and the country your IP address belongs to, not the address itself, and the hash cannot be linked to you or across days. Nothing is stored on your device for statistics.
• Cart contents are stored in your browser's local storage, so the cart survives page reloads.

Service providers

• Stripe processes payments and calculates taxes.
• PayPal, Klarna and other payment providers process your payment if you choose them on the checkout page.
• Resend sends and receives emails (receipts, login links, gifts, support).
• Backblaze stores the wallpaper files and images.
• Cloudflare delivers the site and protects it from attacks; it tells us which country a visit comes from.

These providers process data on our behalf and may store it outside your country, including in the United States, under appropriate safeguards.

How long we keep it

Order records are kept as long as tax and accounting rules require, and so you can keep re-downloading your purchases. Login links expire after 15 minutes. Support conversations are kept while they are useful to help you.

Your rights

Depending on where you live (for example under the GDPR), you can ask to access, correct, export or delete your personal data, or object to its use. Email your request to [email protected] from the address it concerns, or use the contact form. You can also complain to your local data protection authority.

Changes

We may update this policy; the date at the top shows the latest version.