Privacy Policy

1. Who controls your data

Vanilija Studio d.o.o., Borongajska cesta 94, 10000 Zagreb, Croatia (OIB: 12970411840) is the data controller for the personal data described here. Contact: icrni.work@gmail.com.

2. What we collect

• Your email address, to deliver your purchase and let you recover a lost download link.
• Purchase and payment details, processed and held by Paddle (see §4). We never see or store your card details.
• Only if you accept the cookie banner: ad-click identifiers (e.g. Meta's fbclid) and campaign/referrer information, used to measure whether an ad led to a sale. If you decline, none of this is stored; only what's strictly necessary to deliver your purchase is kept.

3. Why we process it

• To deliver the product you bought and respond to support requests (performance of a contract).
• To meet tax and accounting obligations, via Paddle as Merchant of Record (legal obligation).
• To measure ad performance, only where you've given consent (consent, withdrawable at any time).

4. Who we share it with

• Paddle.com Market Limited: payment processing and Merchant of Record for every purchase. See Paddle's privacy policy.
• Amazon Web Services: sends transactional email (purchase confirmation, download/re-access links).
• Cloudflare: securely stores and serves your purchased file.
• Meta Platforms Ireland Ltd: only if you consented to tracking, receives a purchase event used to measure ad performance.

5. How long we keep it

Order and payment records are kept as long as required by Croatian tax and accounting law. Download links expire automatically after a limited time. You can request erasure or pseudonymization of your personal data at any time (§6), subject to what we're legally required to retain.

6. Your rights

Under the GDPR, you can ask us to access, correct, erase, restrict, or export your personal data, and you can object to or withdraw consent for optional processing (like ad-tracking) at any time. Contact icrni.work@gmail.com to exercise any of these. You can also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or your own country's data protection authority.

7. Cookies

We use a cookie only to remember your tracking preference, plus, only if you accept, cookies used for ad-attribution and analytics as described in §2. You can change your decision by clearing your browser's cookies for this site, which brings the consent banner back.