Privacy Policy

Chronicle Maker is run by Marco Tifi, VAT no. (P.IVA) 02264760568, Via Alessandrino 120, 00172 Roma (RM), Italy ("we", "us"), who is the data controller. Contact: chroniclemaker@hotmail.com

a) When you buy: your name and email address, PayPal order and transaction IDs, the product purchased, amount, currency and date. PayPal sends us this data after payment. We never see or store your card or bank details: PayPal processes them.

b) When you write to us (contact form or email): your name, email address and your message.

c) When you browse the site: technical data needed to run and protect it, such as IP address, browser, device and pages requested (server logs). To limit automated launch signup attempts, we use a daily hash of your IP address and attempt counters; the raw IP address is not stored in these counters. Stale counters are removed during subsequent signup requests after 24 hours. Hashing is not anonymization.

d) Only if you accept marketing cookies: advertising measurement data through the Meta Pixel and the Meta Conversions API (see section 5). You don't need an account to buy, and we don't collect special categories of personal data.

e) When you sign up for launch emails: your email address and the date of signup. We keep the consent text shown when you subscribed.

- To process your order, deliver your files (Google Drive download link on screen and by email) and give you support: performance of a contract (Art. 6(1)(b) GDPR).

- To keep accounting and tax records: legal obligation (Art. 6(1)(c) GDPR).

- To answer your messages: steps taken at your request, or our legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).

- To keep the site secure and prevent fraud or abuse: our legitimate interest (Art. 6(1)(f) GDPR).

- To measure and improve our ads on Facebook and Instagram: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

- To send you emails about new releases and Kickstarter campaigns: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by unsubscribing or writing to us.

- PayPal (Europe) S.à r.l. et Cie, S.C.A., which processes payments as an independent controller under its own privacy statement.

- Google (Google Drive), which hosts the files you download. When you open the download link, Google processes your data under its own privacy policy.

- Our technical providers, acting as processors on our behalf: website hosting and database (Lovable, Supabase) and our transactional email provider.

- Meta Platforms Ireland Limited, only if you accept marketing cookies (section 5).

- Our accountant or tax advisor, and public authorities when the law requires it. We never sell your data.

If you click "Accept" in the cookie banner, we use the Meta Pixel and the Meta Conversions API to understand which of our ads lead to visits and purchases. Meta may receive: the pages and products you view, when you start a payment, cookie identifiers (_fbp, _fbc), the ad click ID, your IP address and browser information and, when you buy, the order value, the products bought and your email address in hashed (non-readable) form. For the collection and transmission of this data, we and Meta Platforms Ireland Limited are joint controllers under Art. 26 GDPR, according to Meta's Controller Addendum. Meta is responsible for any further processing, as described in its Privacy Policy (facebook.com/privacy/policy). If you click "Reject", or make no choice, none of this data is sent to Meta. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

Only with your marketing-cookie consent, a successful launch email signup reports a Lead event to Meta for advertising measurement and optimization. The event is named Coming next signup; we do not include the signup email in this event. Signing up for launch emails does not itself grant advertising-cookie consent.

With your marketing-cookie consent, the Google tag reports a purchase conversion after PayPal confirms payment. Google receives the paid order total in USD and the PayPal order ID, along with browser, network and advertising cookie or click identifiers used by the existing tag, to measure ad performance and optimize advertising. We do not send your email address with this conversion. A record of the reported order ID is kept in localStorage until you clear your browser data to prevent duplicate reports. No purchase conversion is sent without acceptance or when an applicable browser opt-out is active. You can withdraw consent at any time using Cookie settings at the bottom of every page. Your dated choice and the notice version are retained as consent evidence. See Google's Privacy Policy (policies.google.com/privacy).

Some providers (Meta, Google, PayPal) may process data outside the European Economic Area, including in the United States. These transfers rely on the EU-U.S. Data Privacy Framework, where the provider is certified, or on the European Commission's Standard Contractual Clauses.

- Order and accounting data: 10 years, as required by Italian law.

- Messages you send us: up to 24 months after our last exchange.

- Server logs: for a limited time, normally no longer than 12 months, unless needed to investigate abuse.

- Your cookie choice: 6 months, then we ask again.

- Data received by Meta: kept by Meta according to its own policy.

- Launch email list: until you unsubscribe.

You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and you can withdraw your consent at any time (this doesn't affect processing done before). Write to chroniclemaker@hotmail.com: we'll reply within one month. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the EU country where you live.

- Purchase data is necessary to complete your order: without it we can't deliver the files.

- We don't use automated decision-making that has legal or similar effects on you.

- This site is not directed at children under 14.

- We may update this policy. The date at the top shows the current version.