Who is responsible for your data
The data controller is Romano Silverio Marco (Candle & Culprit), sole proprietor, Piazza Caduti, 08048 Tortolì (NU), Italy, VAT IT01705730917. Contact for any privacy request: support@candleandculprit.com.
What data we collect and why
Orders. When you buy, Stripe and Link process your payment. We receive your email address, country, the items you bought, the amount and the time of the order, and whether you gave consent to immediate download.
- We use this data to deliver your files, provide support and keep the records required by tax and accounting law.
- Legal basis: performance of the contract and legal obligations.
- We never see or store your card details.
Free preview. If you ask for the free preview, we collect your first name and email address to send it to you.
- Legal basis: your request (pre-contractual steps).
- If you also tick the box to receive news and offers, we use your email for that purpose until you unsubscribe. Legal basis: consent.
Support. If you write to us, we use your messages to answer you.
Website. Our hosting provider records technical data, such as IP address, browser and pages requested, to run and protect the website. Legal basis: legitimate interest in security.
Cookies, the Meta Pixel and your choices
We use storage that is strictly necessary for the website to work, such as your cart and your cookie choices.
We also use the Meta Pixel and Meta's Conversions API to measure our Facebook and Instagram ads and to show ads to people who visited our site. They send Meta your browser details, the pages you view and actions such as adding to cart, starting checkout, asking for the free preview or buying. For purchases and free preview requests we also send a hashed (encrypted) version of your email address and your country. Meta Platforms Ireland Ltd. is joint controller with us for collecting and sending this data; Meta then processes it as an independent controller under its own privacy policy.
If you are in the EU, the EEA, the UK, Switzerland or Brazil, we ask for your consent first in the cookie banner, and nothing is sent to Meta unless you accept. You can change your choice at any time with "Cookie preferences" at the bottom of every page. Legal basis: consent.
Everywhere else, the Meta Pixel is on by default. You can turn it off at any time with "Your Privacy Choices" at the bottom of every page, and we honor the Global Privacy Control signal. Under some US state laws this counts as "sharing" personal information for cross-context behavioral advertising; we don't sell personal information for money.
Our cookie banner is provided by iubenda. See our cookie policy for the list of cookies and how long they last.
Notice at collection
For US residents: We collect identifiers (such as your name and email), order information, online activity through cookies and the Meta Pixel, and approximate location from your IP address. We use this information to fulfill orders, send previews you request, answer support questions, protect the site and measure advertising. We do not sell personal information for money. Sharing with Meta for cross-context behavioral advertising may count as “sharing” under some state laws. To opt out, use “Your Privacy Choices” in the footer or enable Global Privacy Control in your browser. We keep order records for 10 years, free preview requests and support messages for up to 24 months, and newsletter details until you unsubscribe. See our cookie policy for cookie lifetimes.
Who receives your data
- Stripe and Link. They process payments, taxes, receipts and payment support as independent controllers, under their own privacy policies.
- Service providers that work for us:
- website hosting and database (Lovable and its infrastructure providers);
- email delivery and forwarding for our support address;
- Meta, for ad measurement and advertising, as described in the Cookies section.
- Authorities, when the law requires it.
We don't sell your personal data.
Transfers outside the EU
Some providers are based in, or use servers in, the United States or other countries outside the EU. In those cases, transfers rely on:
- the EU–U.S. Data Privacy Framework, where the provider is certified; or
- the European Commission's Standard Contractual Clauses.
How long we keep your data
- Order records: 10 years, as required by Italian tax and accounting law.
- Free preview requests: up to 24 months.
- Newsletter data: until you unsubscribe or withdraw consent.
- Support messages: up to 24 months after the last message.
Your rights
You can ask to access, correct or delete your data, or to restrict or object to its processing. You can also receive your data in a portable format and withdraw your consent at any time.
To do so, write to support@candleandculprit.com. You can also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the country where you live.
Age
Our games are for adults. We don't knowingly collect data from anyone under 18.
Changes
If we change this policy, we'll update the date at the top of this page.