Privacy policy
The short version
- The site sets no cookies, uses no analytics and loads nothing from third parties.
- When you order, we use your details only to process and deliver the order.
- The app works offline: what you enter stays on your phone.
- We sell no data and send no marketing.
Who is responsible
Henri BARAKAT EI (Stelora.ai), 46 Avenue de Flandre, 75019 Paris, France. Contact: [email protected].
When you visit the site
We set no cookies and use no statistics, advertising or tracking tools. Fonts are served from our own server, so no request goes to Google or any other third party while you browse.
Like any website, this one is served by a host, Replit, Inc., through the network of Cloudflare, Inc.. To deliver pages and protect the site from abuse, these providers process technical data: IP address, date and time, the page requested and the browser type. This rests on our legitimate interest in running and securing the site (GDPR article 6(1)(f)). The providers keep these logs for a limited period that they set; we do not use them to measure audiences.
Link to Etsy
The order buttons are plain links: nothing is sent to Etsy until you click one. Once you are on Etsy, its own privacy policy applies.
When you order
What we receive
- Etsy orders: Etsy passes us your name, delivery address, what you ordered and your messages. Etsy handles payment; we never see your card details.
- Questions by email, phone or WhatsApp: your email address or phone number, your name and what you write.
Why, and on what basis
- To process, ship and follow up your order, and to handle a return or warranty claim: performance of the contract (GDPR article 6(1)(b)).
- To keep our accounts and invoices: legal obligation (GDPR article 6(1)(c)).
- To answer your questions: our legitimate interest in replying (GDPR article 6(1)(f)).
Who receives it
- The carrier, for delivery: Sociedad Estatal Correos y Telégrafos, S.A. (Correos).
- Etsy Ireland UC, which runs the shop where orders are placed.
- WhatsApp Ireland Limited (Meta group), if you message us on WhatsApp. WhatsApp also processes this data for its own service, as a separate controller.
How long
- Order conversations: until the legal guarantee of conformity ends, two years after delivery, then deleted.
- Invoices and accounting records: ten years, as article L123-22 of the French Commercial Code requires.
- A question with no order: as long as it takes to answer, and at most three years after we last spoke.
The Riftkeeper app
The app collects no personal data. It works fully offline: player names, matches, scores and settings are saved only in the app's private storage on your phone and are never sent to us. It has no accounts, analytics, crash reporting, advertising or advertising identifiers, and no access to your location, contacts, camera or microphone.
It uses vibration, to mark the end of a turn, and battery-saver status, read on the phone to calm its animations and never stored or sent. Your phone's own backup (iCloud, Google) may include the app's data depending on your settings; that backup is controlled by you and by Apple or Google, not by us.
To delete everything: Profile → Delete local data, or uninstall the app. We hold no copy. If a future version adds anything that works online, this policy will be updated before that version is released.
Transfers outside the European Union
Replit, Inc. and Cloudflare, Inc. are based in the United States. Those transfers are covered by the EU–US Data Privacy Framework for providers certified under it, or otherwise by the European Commission's standard contractual clauses. We do not move order data outside the European Union ourselves.
Your rights
You can ask to access, correct or erase your data, to restrict its processing or to receive it in a portable format, and you can object to processing based on our legitimate interest. Write to [email protected]; we reply within one month.
If you believe your rights have not been respected, you can complain to the French data protection authority, the CNIL (cnil.fr/fr/plaintes), or to the authority where you live.
No automated decisions are made about you, and no profiling takes place. The site does not respond to browser "Do Not Track" signals because it does no tracking to switch off.
Changes
We will update this policy if our practices change. The date at the top shows the current version; any significant change will be flagged on the site's home page.