Privacy Policy
Last updated September 30, 2026
1. Who handles your data
The data controller is Rastislav Brocka SOPHIADEV, Dr. Bokesa 2067/32, 902 01 Pezinok, Slovakia, Company ID 52 015 815. You can reach us any time at [email protected].
2. What data we process
| Data | Why | Basis |
|---|---|---|
| Your child's first name, age, and how they go by | Generating the case file. The letters of the name determine the ciphers, the agent ID, and the final code. | Fulfilling your order |
| Your email address | Delivering the file and communicating about your order. | Fulfilling your order |
| Payment details | Paying for the order. Stripe processes them directly; we never see or store them. | Fulfilling your order |
| Order records | Accounting and tax obligations. | Legal obligation |
| Visitor statistics and advertising identifiers | To learn which parts of the page make sense to parents and to measure our ads. | Your consent |
3. Children
This matters, so we'll say it plainly. We process a child's name and age only on the instruction of the parent or legal guardian who placed the order. We never collect information from children directly. A child has no account with us, we don't build a profile of them, we don't send them anything, and we don't use their name for advertising. The name is used for one thing: generating their case file. While you're only trying the ID card preview on the site, the name stays in your browser and is not sent anywhere.
4. Who we share data with
| Company | Why |
|---|---|
| Stripe | Payment processing |
| Cloudflare | Running the site, generating and storing the files |
| Resend | Sending the email with the file |
| PostHog | Visitor statistics (only with consent) |
| Meta, Google | Ad measurement (only with consent and only when ads are running) |
We are based in the European Union, and some of these companies process data in the United States and elsewhere. We don't sell your personal information.
5. How long we keep data
- Generated files: 30 days after the order, then we delete them.
- The child's name and age: only during generation and in the order record.
- Order records: as long as accounting and tax rules require.
- Statistics and advertising identifiers: per the settings of each tool, usually up to 12 months.
6. Analytics and cookies
Without your consent, no analytics or advertising tool runs on the site, and the site works exactly the same. If you consent, visitor statistics and possibly ad tools are loaded. You can withdraw consent at any time by clearing the site's data in your browser; we'll ask again on your next visit.
When you type a child's name into the form, we save it along with the age and pronoun in your browser's storage (localStorage) so you don't have to type it again when you come back. This is not a cookie: a cookie is sent to the server with every page load, while this data never leaves your device. It deletes itself after 7 days, and you can delete it right away with the Forget it link next to the form. After payment it's deleted automatically.
7. Your rights
You have the right to access your data, to correct or delete it, to restrict processing, to data portability, and to object. You can withdraw consent at any time. Email us and we'll reply within 30 days. If you live in California, you also have the rights described in the CCPA, including the right to know what personal information we hold and to ask us to delete it; we don't sell personal information.
If you believe we're handling your data incorrectly, you can complain to the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, Slovakia, or to your local consumer protection authority.
8. Changes
If this policy changes, we'll publish the new version on this page together with the date of the last update.