privacy policy

Aleksandr Smetanka

Via Fontanesi Antonio 4, 20146 Milan (MI), Italy

P.IVA: 12761020960

Codice Fiscale: SMTLSN84L30Z154O

Email: a@smetanka.me

When you buy something, Stripe Checkout collects your email address, payment details, and billing/tax details. Our site does not process or store card numbers. Order details (product, variant, quantity, selected artwork) are stored with your order in Stripe.

For ready paid wallpaper packs, we store the checkout email, Stripe session/payment reference, selected pack, delivery status, and short delivery-link state in Cloudflare D1 for up to 90 days. We do not store card data in this delivery system.

To keep refunded or disputed orders revoked, we retain the relevant Stripe payment/dispute references and status without card data for up to one year.

If you contact us by email, we keep the correspondence so we can answer and resolve your request.

Our hosting and security providers process basic request data such as IP address, browser information, requested path, timestamps, and bounded error or security events so we can operate and protect the site. Application-level error and Content Security Policy logs remove URL query strings and redact common secret-like values before they are written.

If you request the free wallpaper pack, Resend processes your email address to send the double opt-in message. A new address is not stored as a mailing-list contact or added to the marketing segment unless you confirm.

If you accept analytics cookies, Google Analytics, delivered through Google Tag Manager, may collect information such as pages viewed, approximate location, device/browser type, referring page, session duration, and interactions with the site. We do not use Google Analytics for advertising, remarketing, or profiling.

If you accept analytics cookies, Microsoft Clarity may collect interaction data such as clicks, taps, mouse movements, scrolling, page navigation, device/browser information, and approximate location to provide heatmaps and reconstructed session recordings. Sensitive text and form input are masked, and Clarity is not loaded before you consent.

Analytics is disabled on confirmation, unsubscribe, paid-download, order-confirmation, and checkout-success pages so private transaction and access values are not exposed to analytics providers.

The free wallpaper pack subscription uses double opt-in: you enter your email, receive a confirmation link, and are added to the mailing list only after opening that link and pressing the confirmation button.

An unconfirmed address is used only to send and validate the confirmation link and is not sent marketing email.

We use Resend (resend.com) as our email processor for confirmation emails, welcome emails, and occasional updates from sensual trippy loveforms. You can unsubscribe at any time through the unsubscribe link in every marketing email.

– To deliver your order and provide support — performance of a contract (Art. 6(1)(b)).

– To keep invoices and transaction records — legal obligation, including Italian tax law (Art. 6(1)(c)).

– To handle payment disputes and prevent fraud — legitimate interest (Art. 6(1)(f)).

– To secure, debug, and keep the site reliable — legitimate interest (Art. 6(1)(f)).

– To send mailing list emails after double opt-in — your consent (Art. 6(1)(a)).

– To run optional analytics — your consent (Art. 6(1)(a)).

You can withdraw analytics consent at any time through “Cookie preferences” on the Cookie Policy page. Withdrawing consent does not affect processing that happened before withdrawal.

Stripe processes payments as our payment processor and may act as an independent controller for certain payment data — see Stripe’s own privacy policy.

Vercel hosts the website and processes request metadata and operational logs needed to deliver and protect it.

Resend processes mailing list email addresses and email delivery events as our email processor.

Cloudflare processes private paid-download files in R2 and the minimal paid-delivery records in D1. Files are served only after a valid private-link and order-status check.

Google Analytics and Google Tag Manager are provided by Google Ireland Limited. Google may process analytics data on servers outside the EEA. Where data is transferred internationally, Google relies on applicable transfer safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

Microsoft Clarity is provided by Microsoft. Microsoft may process analytics data outside the EEA using applicable international transfer safeguards. Clarity receives analytics data only after you consent, and advertising storage remains disabled.

We do not sell personal data. We do not use advertising trackers, remarketing pixels, or marketing cookies.

Order and invoice records are kept for as long as required by tax law (in Italy, generally 10 years), then deleted.

Support correspondence is kept only as long as needed to resolve your request and protect us in case of disputes.

Operational and security logs are kept only for the configured provider retention period and as long as reasonably needed to investigate reliability or security incidents.

Mailing list contacts are kept until you unsubscribe or ask us to delete them. After unsubscribe, a minimal suppression record may remain so that we continue to honor your opt-out; you can ask us to delete it.

Paid wallpaper delivery records in our Cloudflare delivery system are deleted after 90 days. Stripe retains payment and invoice records according to its own and applicable legal retention obligations.

Refund and dispute revocation records in the delivery system are deleted after one year.

Analytics consent choices, the consent-policy version, and the time of the decision are stored until you change them, a new policy version requires a new choice, or you clear your browser storage. Google Analytics data is retained according to the retention settings configured in Google Analytics.

Microsoft Clarity data is retained according to the retention settings and limits applied by Microsoft Clarity.

Under the GDPR you can request access, correction, deletion, restriction, or portability of your data, and you can object to processing. Where processing is based on consent, you can withdraw consent at any time.

Email a@smetanka.me from your checkout email so we can verify it’s you; we respond within 30 days. You can also lodge a complaint with your local data protection authority or the Italian supervisory authority, the Garante per la Protezione dei Dati Personali (gpdp.it).

We use three categories of cookies or similar technologies:

– Strictly necessary: required to run the site, remember your cookie choice, and process payments through Stripe. These do not require consent.

– Analytics: Google Analytics and Microsoft Clarity help us understand how the site is used. They are loaded only if you accept analytics in the cookie banner.

– Marketing: not used.

You can accept all, decline all non-essential cookies, or customize your choices. You can change your choice at any time through “Cookie preferences” on the Cookie Policy page. See the Cookie Policy for details.

We may update this policy. The current version is always published on this page.