Privacy Policy

1. Data we process

• Technical data — IP address, browser and device information and request data, processed when you load pages, mainly by our hosting and security providers to deliver the site and protect it from abuse.
• Preferences stored on your device — your language choice (a cookie) and your reading history (stored in your browser’s local storage, not sent to our servers).
• Communications — if you email us, your email address and the content of your message.
• Account and payment data — when accounts and paid features launch: your email, display name, library, likes and comments, and transaction records. Card details are handled by payment providers; we never see or store full card numbers.

2. Why we use it and legal bases

• To provide the Service and remember your settings — performance of a contract (Art. 6(1)(b) GDPR).
• To keep the Service secure and prevent abuse — our legitimate interests (Art. 6(1)(f)).
• To answer your requests — legitimate interests or contract.
• To meet legal obligations such as tax and accounting — legal obligation (Art. 6(1)(c)).
• For anything else, such as marketing emails, we will ask for your consent first (Art. 6(1)(a)).

3. Service providers

We use trusted providers who process data on our behalf under data processing agreements: Cloudflare (content delivery, security, email forwarding), our server hosting provider, and — when introduced — payment processors. Some providers may process data outside the EEA; in that case we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision. We do not sell your personal data.

4. How long we keep data

Technical logs are kept only as long as needed for security, usually no longer than 30 days. Emails are kept for as long as needed to handle your request. Account data is kept while your account is active and deleted or anonymised after you close it, except where we must keep records by law (for example, transaction records for tax purposes).

5. Your rights

You have the right to access, correct or delete your personal data, restrict or object to its processing, data portability, and to withdraw consent at any time. To exercise your rights, email [email protected]. You also have the right to complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy) or to the supervisory authority in your country.

6. Children

The Service is not intended for children under 14. We do not knowingly collect personal data from children under 14; if you believe a child has provided us with data, contact [email protected] and we will delete it.

7. Security

We use encryption in transit (HTTPS), access controls and other reasonable measures to protect your data. No online service is completely secure, but we work to protect your information and will notify you and the authorities of breaches where required by law.

8. Changes and contact

We will post any changes to this policy on this page. Questions: SlavicToon, Steliou Ioannou, Strovolos, 2032 Nicosia (Lefkosia), Cyprus, [email protected].