Privacy policy

Data we collect

When you buy: your email address and order details (products, amount), needed to deliver the files and to invoice you. Payment is handled by Stripe: no banking data ever passes through our servers.

When you sign up to the newsletter: your email address, with your explicit consent, used only to tell you about new collections.

Data controller

G&T Studio — reachable at contact@gtstudio.store.

Who processes your data for us

We rely on the providers below. Each only receives what its job requires, and none of them may use your data for their own purposes.

• Stripe — payment processing. Card details go straight to Stripe and never reach our servers.
• Supabase — database holding orders and newsletter subscriptions.
• Cloudflare R2 — storage of the wallpaper files you download.
• Resend — sending order and newsletter emails.
• Upstash — rate limiting, which protects the site from abuse.
• Vercel — hosting and cookieless audience measurement.
• Sentry — error monitoring, so failures are detected and fixed. Hosted in the European Union.
• TikTok — advertising pixel, loaded only after you accept marketing cookies. This involves a transfer outside the European Union.

Retention period

Order data is kept for 3 years. Newsletter emails are kept until you unsubscribe.

Your rights

Under the GDPR you have a right of access, rectification, erasure and portability over your data. Write to contact@gtstudio.store to exercise it.

Cookies and analytics

Nothing optional is stored before you choose. The banner lets you accept, refuse, or pick per category, and you can change your mind at any time through “Manage cookies” at the bottom of any page.

• Necessary — your cart, your session and security. Always on, no consent required.
• Analytics — Vercel Analytics, which counts visits without cookies and without storing your IP address.
• Marketing — the TikTok pixel, used to measure our ads. It is only loaded once you accept, and refusing keeps it off entirely.

Your choice, its date and the version of this list are kept as proof of consent.