Privacy Policy

1. Data controller

The controller of personal data processed through this Service is:

• Dawid Słysz Digital Solutions (sole proprietorship)
• Gen. Bora-Komorowskiego 85A/26, 80-377 Gdańsk, Poland
• Tax ID (NIP): 5842859530
• Business registry (REGON): 540051090
• Contact: thedevinczi@gmail.com

No Data Protection Officer is appointed. For any privacy-related question or request please use the contact email above.

2. What we collect

• Email address — used to deliver your purchase receipt and to contact you if a content report affects your purchase.
• Optional name and URL — shown publicly next to your message if you choose to provide them.
• The message you publish — this is public by design.
• IP address and timestamps of consent — recorded at the moment of purchase as legal evidence that you agreed to the Terms of Service.
• Payment details — handled entirely by Stripe. We never see or store card numbers.

3. Why we process this data

We process personal data to perform the contract you enter when you buy characters (GDPR Art. 6(1)(b)), to comply with tax and bookkeeping obligations (Art. 6(1)(c)), and where relevant to defend against content reports or chargebacks (Art. 6(1)(f)).

4. Who sees the data

Our payment processor, Stripe, receives your email and purchase details so it can process the payment. Stripe is headquartered in the United States and may process your personal data there; these transfers are covered by Standard Contractual Clauses under GDPR Article 46 and by Stripe’s participation in the EU–US Data Privacy Framework.

Content moderation is performed with the help of Anthropic (Claude API). Only the text of your proposed message and, if provided, your chosen display name are sent to Anthropic for classification — never your email, IP address, or payment details. Anthropic states that inputs submitted through the API are not used to train its models. Anthropic is US-based; transfers are covered by Standard Contractual Clauses (GDPR Article 46).

Our VPS hosting provider is based in the European Union. Server logs may include IP addresses for a limited retention period (typically 14 days). We use only strictly-necessary cookies for session management; we do not use analytics, advertising or tracking cookies. We do not sell your data.

5. Retention

Purchase records are kept for as long as required by Polish tax law (currently 5 years from the end of the tax year). After that, personal identifiers may be removed while the published message remains on the wall in its historical place.

6. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15) and obtain a copy;
• rectify inaccurate data (Art. 16);
• erase your data where one of the grounds in Art. 17 applies;
• restrict processing (Art. 18);
• receive your data in a machine-readable format and transmit it to another controller — data portability (Art. 20);
• object to processing based on our legitimate interests (Art. 21);
• lodge a complaint with the Polish data protection authority (UODO, uodo.gov.pl).

Requests can be sent to thedevinczi@gmail.com.

Note: once a message has been published on the wall it is public and cannot be retroactively un-published from archives, caches, or copies held by third parties. We can however remove your personal identifiers (name, URL, email) from our own records on request.