Privacy Policy
Last updated:
We collect as little personal data as we can. This policy explains what we collect, why, who helps us process it and what your rights are.
1. Who is responsible
The controller of your personal data is The Button Wall. Contact us about privacy at leonardt@outlook.com.
2. What we collect
If you visit the site
We don’t use advertising trackers or third-party analytics, and we don’t create visitor profiles. We keep a small first-party record of anonymous steps in the renting flow (for example: opened claim, selected a spot, started checkout, paid) so we can see where people drop off. Each browser gets a random id in local storage; we don’t tie it to your email unless you later rent a button. When you click a button on the wall, we add one to that button’s click counter; we don’t record who clicked. Our hosting and database providers process technical data such as your IP address and browser type to deliver the site and keep it secure.
If you rent a button
- your email address;
- your button content: text, link, colors, position and size;
- your order details: plan, amount, dates and payment status;
- the messages you send us.
Payments are handled by Stripe. Stripe collects your payment details directly; we only receive the result of the payment and limited details such as the amount and the payment method type. We never see your full card number.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Publishing your button, processing payment, sending receipts, review results and renewal reminders | Performance of a contract, Art. 6(1)(b) |
| Keeping accounting and tax records | Legal obligation, Art. 6(1)(c) |
| Keeping the site secure, preventing fraud and abuse, and defending legal claims | Legitimate interests, Art. 6(1)(f) |
| Answering your messages | Legitimate interests, Art. 6(1)(f), or steps before a contract, Art. 6(1)(b) |
We don’t send marketing emails, and we don’t sell or share your personal data for advertising.
4. Public information
Your button text, colors and link are shown publicly on the wall while your plan is live. Your email address is never shown.
5. Who processes your data for us
We use these service providers, bound by data processing terms:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing, receipts and refunds |
| Supabase | Database, server functions and admin sign-in |
| Resend | Sending transactional emails |
| Vercel | Website hosting and delivery |
| Google (favicon service) | Showing the small site icons on the wall |
To show the small site icons on the wall, your browser loads them from Google’s favicon service, which receives your IP address and the address of the site whose icon is shown.
6. International transfers
Some providers process data outside the European Economic Area, for example in the United States. Where they do, the transfer is covered by an adequacy decision such as the EU-US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.
7. How long we keep it
- Button and order data: while your plan is live, during the 7-day renewal window, and then as long as tax and accounting law requires us to keep records of sales.
- Messages you send us: as long as needed to answer them and handle any follow-up.
- Technical logs: kept by our providers for a limited period for security purposes.
8. Your rights
You can ask us to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Write to leonardt@outlook.com. We answer within one month. You also have the right to lodge a complaint with your local data protection authority.
9. Security
We protect your data with encryption in transit, access restricted to the people who need it, and providers with strong security practices. Read more on our security page.
10. Children
The service is not intended for anyone under 18, and we don’t knowingly collect their data.
11. Cookies
We only use storage that is strictly necessary for the site to work: an optional theme preference, and an administrator sign-in session. See our Cookie Notice.
12. Changes
We may update this policy. We’ll post the new version here and update the date at the top; if a change matters to you, we’ll also tell you by email.