Privacy Policy
Starwall collects only what selling and delivering a digital wallpaper requires. The seller is established in France, so the GDPR applies to everything below.
What we collect
- Your email (Stripe payment, link delivery, free pack)
- Transaction data (session id, amount)
- A library cookie and an email-capture cookie — display preferences that never leave your browser
- Anti-abuse counters: an irreversible digest of your email address or IP, never the value itself
- Optional analytics pixels (TikTok, Meta) where configured
Why
- To fulfil the order and give you access to the download
- To resend your purchase links on request
- To stop abuse and automated mailing
- To measure advertising performance, if pixels are enabled
How long we keep it
- Paid order: email, Stripe ids, product, amount, token — as long as the access you bought, then erased on request. The token is the product: deleting it removes the access that was paid for. Kept while the access is, and erased within a month if you ask.
- Free pack: email, token — 3 years after the link was last opened. No contract behind it, so the CNIL's three-years-after-last-contact guidance for an address collected without a purchase applies.
- Anti-abuse counters: an HMAC digest of an email, an IP or a token — the length of the window (1 to 24 hours). Hashed on the way in and dropped as soon as the window closes: a counter only ever needs equality, never the value.
- Invoice and payment method — 10 years (French accounting obligation, art. L123-22). Held by Stripe rather than by this site, so erasing an order here does not touch the accounting record — which is what makes erasure possible at all.
- Library cookie (`starwall_library`) and email-capture cookie — 2 years, in your browser only. They never reach us, so clearing them is something you do in your browser without asking anyone.
The download link is permanent, so your order is kept for as long as the access you bought. That is the product itself — and you can end it whenever you want by asking for erasure below.
Processors
Stripe (payment), Supabase (database and file storage), Resend (email), Vercel (hosting).
Your rights
You can ask for access, correction or erasure of your data by writing to contact@starwall.shop. We answer within 30 days.
Erasure permanently removes your download link: the wallpapers you have already downloaded stay yours, but the link stops working and cannot be restored. The matching invoice stays with Stripe under the ten-year accounting obligation, which is not ours to lift.
You may also complain to the French data protection authority, the CNIL.