Counted

Privacy Policy

Last updated: 23 April 2026

Short version: we only collect the information we need to make and ship your poster (names, date, email, address). We don't sell your data, we don't send marketing unless you opt in, and you can ask us to delete everything at any time.

1. Who is responsible

The data controller is Gustavo Pinto, NIF [NIF], registered at [REGISTERED_ADDRESS], Portugal. For any privacy-related question, write to hello@counted.love.

2. What we collect

When you use the site: the names and anniversary date you enter, and answers to the optional 4-question quiz. This is processed in your browser to calculate your numbers; we only store it if you proceed to purchase.
When you buy: your email address, the names and date for your poster, and (for the printed version) your shipping address.
Payment data: card details are handled entirely by Stripe — we never see or store them. We only receive a payment confirmation and a masked reference.
Technical data: basic server logs (IP, browser) kept for security and debugging.

3. Why we use it

To produce and deliver your order (contract — GDPR Art. 6(1)(b)).
To communicate with you about your order.
To comply with legal obligations such as accounting and tax (GDPR Art. 6(1)(c)).
To improve the site and prevent fraud (legitimate interest — GDPR Art. 6(1)(f)).

We do not send marketing emails unless you explicitly opt in.

4. Who we share it with

We rely on a small number of trusted service providers, each bound by GDPR-compliant agreements:

Stripe — payment processing.
Vercel — website hosting.
Email provider (Cloudflare Email Routing) — transactional emails.
Print partner ([PRINT_PARTNER]) — printing and shipping of posters.

We do not sell or rent your personal data to anyone.

5. International transfers

Some of our providers (for example Stripe) may process data outside the European Economic Area. When they do, we rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission.

6. How long we keep it

Order data: 10 years, to comply with Portuguese accounting and tax law.
Support email correspondence: up to 3 years after the last interaction.
Quiz answers and names entered without purchase: discarded when you close the tab.

7. Your rights

Under the GDPR, you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing based on legitimate interest. To exercise any of these, email hello@counted.love. We respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD — cnpd.pt).

8. Cookies

This site currently does not use tracking or marketing cookies. Only strictly necessary cookies may be set by services we use (for example Stripe during checkout). If we add analytics or marketing cookies in the future, we will ask for your consent first.

9. Security

We use industry-standard measures to protect your data: HTTPS everywhere, access limited to the people who need it, and reputable providers for payment and hosting. No system is 100% secure, but we take this seriously.

10. Changes

If we update this policy, we'll post the new version here and change the "last updated" date. For material changes we will also notify existing customers by email.

← Back to Counted