Privacy & Cookies
1. Who is responsible for your data
The controller of your personal data is:
{{seller_name}}
{{seller_address}}
Email: fellystar@outlook.com
Write to this address about anything in this policy, including using your rights (section 6).
2. What we collect and why
| What | Why | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|
| Email address, sign-in codes | Your account and signing you in | Art. 6(1)(b): the contract (our e-services) | Until you ask us to delete your account |
| Characters: names, Minecraft/Roblox usernames and IDs, avatar or skin face images, notes | Showing them in your videos and saving them for next time | Art. 6(1)(b) | Until you remove them or delete your account |
| Orders: videos ordered, reference links, ideas and notes, prices, discount codes, the consents you gave | Making and delivering your order, handling complaints | Art. 6(1)(b) | 5 years from the end of the year of the order |
| Payment details from PayPal: order and payment IDs, amount, status | Confirming and refunding payments, bookkeeping | Art. 6(1)(b) and 6(1)(c): tax and accounting duties | 5 years from the end of the year of the order |
| Order records needed to defend or pursue claims | Protecting our legal rights | Art. 6(1)(f): our legitimate interest | Until claims expire (up to 6 years) |
| Contact form: name, email, Discord name, project details, message | Answering you and preparing a quote | Art. 6(1)(b) (steps before a contract) and 6(1)(f) | 12 months after our last contact |
| Technical data: IP address, browser, times of requests | Keeping the Website secure and working | Art. 6(1)(f) | As kept by our hosting providers, usually days to weeks |
You don't have to give us your data, but without an email address we can't create an account or take an order.
We don't sell your data, we don't use it for advertising, and we make no automated decisions or profiles about you.
3. Who receives your data
We use trusted providers who process data for us under data processing agreements:
- Supabase (database, sign-in and server functions);
- Netlify (hosting of the Website);
- Resend (sending sign-in and order emails; EU region).
These receive data as independent controllers under their own privacy policies:
- PayPal (Europe) S.à r.l. et Cie, S.C.A. handles your payment. We never see your card details.
- YouTube (Google): the video thumbnails in our portfolio load from YouTube's image server, which sees your IP address. YouTube's player loads only if you play a video, allow video previews, or paste a YouTube link on the order page (we read the video length through YouTube's player).
- playerdb.co and mc-heads.net: when you type a Minecraft nickname, your browser asks them for the account and avatar, so they see your IP address and the nickname.
- Roblox: when you add a Roblox character, our server looks up the username you typed. Roblox does not receive your IP address from us.
- jsDelivr delivers some of the Website's code, and sees your IP address like any website you load.
- Calendly and Discord, only if you choose to open them from our site.
We also share data when the law requires it, for example with tax authorities.
4. Transfers outside the European Economic Area
Some providers (for example Supabase, Netlify, Resend, Google and Calendly) are based in the USA or use servers there. Transfers are protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can ask us for a copy of these safeguards.
5. Browser storage and cookies
We don't use advertising or analytics cookies. The Website stores only what it needs to work:
| Name | What it does | How long |
|---|---|---|
| fellystar_order_v1 | Your cart and characters before you sign in | Until you clear it or finish your order |
| fellystar_cache_v1 | Remembers site texts so pages load faster | Until replaced |
| sb-…-auth-token | Keeps you signed in | Until you sign out |
| fellystar_previews_v1 | Remembers whether you allowed YouTube previews | Until you clear it |
YouTube can store data in your browser only after you allow video previews or press play on a video. You can change your preview choice at any time with the "Video previews" link at the bottom of the home page.
6. Your rights
You have the right to:
- access your data and get a copy;
- correct it;
- have it deleted ("right to be forgotten");
- restrict how we use it;
- data portability: receive the data you gave us in a common format;
- object to uses based on our legitimate interests;
- withdraw any consent you gave, without affecting what we did before.
Email fellystar@outlook.com. We answer within one month.
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl, or to the authority in the EU country where you live.
7. Children
Our services are for adults, or for parents and guardians ordering for their children. We don't knowingly collect data from children under 16 without their parent's consent. If you think a child has given us data, write to us and we will delete it.
8. Security
Data is sent over encrypted connections (HTTPS). Only we can see orders and messages in our admin panel, protected by sign-in and database access rules.
9. Changes
We will update this policy when our services or the law change, and show the date of the latest version below.
Last updated: 29 October 2026