In short
- We need your email to sign you in and send you your boxes.
- We never see your card details: payments go through Paddle.
- We do not sell data and do not show ads.
- You can download or delete your data at any time.
Who is responsible Maksim Zimin PR from Serbia.
The controller of your personal data is Maksim Zimin PR, Novi Sad, Serbia (PIB 115164867, MB 68149452). Contact: [email protected].
This policy follows the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection.
What we collect Your email, the boxes you create and basic technical data.
- Account: email address, name if you give it, interface language.
- Boxes: names of the recipient and participants, wishes, photos, voice and video messages, opening dates.
- Purchases: from Paddle we receive the order number, email, country, amount and which upgrades were bought. We never receive your card details.
- Technical: IP address, browser type, pages visited, cookies (see below).
- Feedback: messages you send us through the feedback form, and your email if you join a waiting list for a new feature.
Why we use it To run the Service, keep it safe and, with your consent, to improve it.
- To create, store and deliver your boxes and send you related emails (performance of a contract).
- To process purchases and keep accounting records (contract and legal obligation).
- To protect the Service from spam and abuse (legitimate interest).
- To understand how the site is used, only if you accept analytics cookies (consent).
- To send product news, unless you unsubscribed (legitimate interest; you can opt out in every email).
International transfers Some providers are outside Serbia; we use standard safeguards.
Some processors may store data outside Serbia and the EU. In such cases we rely on adequacy decisions or standard contractual clauses.
How long we keep it As long as your box lives, plus what the law requires for payments.
- Free boxes: 12 months after the opening date, or after creation if no date is set.
- Boxes with Forever storage: until you delete them or close your account.
- Account data: until you delete the account.
- Purchase records: as long as tax law requires (usually up to 10 years).
Your rights Ask us to show, fix, export or delete your data.
You have the right to access, correct, delete and export your data, to object to or restrict processing and to withdraw consent. Write to [email protected]; we reply within 30 days.
You can also complain to the Commissioner for Information of Public Importance and Personal Data Protection of Serbia or to the data protection authority of your country.
Children The Service is not meant for children under 16.
Accounts and purchases are for people aged 16 and over. If you believe a child has given us personal data, contact us and we will delete it.
Changes We will post updates here.
We will publish any changes on this page and update the date at the top. For important changes we will notify registered users by email.