Privacy

Who is responsible

Jokubas Ramanauskas is the controller for the pages, the photos, and the payment record kept by this shop.

What is stored

Both names, the opening line, the letter, her words, the inside question, up to four photos, and the memory and feeling written under each photo. The inside answer is stored only as a hash. The shop cannot show it back to you.

Also stored: whether the page is paid, when it was created, and the Stripe Checkout id. A wrong answer on the lock is counted so the question cannot be guessed forever. Pages and photos sit on the machine running the shop. They are not sold, and they are not listed in the shop.

You do not have to send any of this. Without the names, the letter, a photo, and the inside question, there is no page to make.

Why it is kept

The page itself is kept to perform the contract: to show the two of you what you made, and to prove it was paid for. The lock, the attempt count, and the limit on how many pages the shop will store are kept because the shop has a legitimate interest in stopping guessing and in keeping the machine from filling up. No decision about you is made by an automated system.

Who else receives it

Stripe processes the €6.99 payment. The charge shows the partner’s name as you typed it, and the payment description includes the published link. Stripe does not receive the letter or the photos. Card data is handled under Stripe’s own notice. Stripe may process that payment data outside your country under its own terms.

The host of the machine can see the files because the files are on that disk. The shop does not give the pages to anyone else.

How long

An unpaid draft, and a payment that failed, is deleted after 14 days, photos included. A paid page stays until you delete it, or until the shop closes. A backup of the machine, if one exists, may keep a copy until that backup is replaced. The cookie that remembers a correct answer lasts 30 days. Wrong-answer counts are kept only for the short window of the limit, then dropped.

The cookie

A correct inside answer sets one cookie for that page. It is httpOnly, it is not sent to other sites, and it exists so the browser does not have to ask again for 30 days. The shop does not use advertising or analytics cookies. This cookie is part of opening the page, so it is set without a separate consent banner.

Who can open it

Before payment, the preview link and her reply link can open the draft. After payment, the public link and her link ask for the inside answer first. Changing the answer closes the page again. The preview link stays a manage link for the person who made the page. Treat it like a password. The published link can appear on the Stripe receipt. It still asks for the inside answer.

Your rights

You can ask to see the page the shop holds, to correct it, to delete it, to restrict how it is used, to receive a copy of the words you submitted, and to object to the limits kept for security. The preview link already deletes the page and the photos. The inside answer cannot be shown back, because only the hash is stored.

You can complain to the data protection authority where you live, and to the authority where the seller is established. Write to the seller first if you want the shop to fix it.