Privacy Policy

This Privacy Policy informs you about how Fairytale Compass ("we", "us", or "our") processes and protects personal data collected through https://fairytalecompass.com (the "Site") in accordance with applicable data privacy regulations, including Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR).

1. Data Controller

The Data Controller responsible for the processing of your personal data on this Site is:

2. What Personal Data We Process

We believe in strict data minimization. We do not require account registration, and there are no contact or inquiry forms on this Site. We only process data in the following contexts:

• Direct Email Inquiries: If you choose to contact us directly via email at hello.fairytalecompass@gmail.com, we receive your email address and any message details you provide, solely to respond to your inquiry.
• Technical Server Logs: When you access the Site, our hosting and content delivery network (Vercel) automatically processes standard technical request data (such as IP address, browser type, operating system, and request timestamps). This is necessary to deliver web pages securely, maintain server stability, and prevent malicious attacks.
• Cookieless Web Analytics: We use Vercel Analytics to understand general website traffic and improve our content. This analytics service is privacy-first, completely cookieless, and does not collect or store personal data, IP addresses, or cross-site identifiers.
• Amazon Store Preference (Local Storage): To provide a convenient experience, our Site suggests a relevant Amazon marketplace based on your device's browser time zone and language settings, and allows you to switch your preferred store. Your preference is stored purely locally on your device via localStorage (fairytale-country). It is never sent to our servers, is not shared with any third party, and is not used for tracking or profiling.

3. Cookies and Tracking

Our Site does not use marketing cookies, profiling cookies, advertising pixels, or third-party tracking scripts. Because we only use essential server logs and local browser storage for your functional store preference, no cookie consent banner is required.

4. Legal Basis for Processing

We process data under the following legal bases pursuant to Article 6(1) of the GDPR:

• Legitimate Interests (Art. 6(1)(f) GDPR): To ensure website security, prevent fraud and abuse, maintain reliable server infrastructure, and answer voluntary inquiries you send us.
• Consent / Direct Request (Art. 6(1)(a) GDPR): When you voluntarily send us an email communication.

5. Third-Party Service Providers and External Links

We do not sell, rent, or monetize your personal data. We rely on trusted infrastructure providers bound by strict Data Processing Agreements:

• Hosting, CDN & Edge Delivery: Vercel Inc. (global edge network, serverless delivery, and cookieless web analytics).

External Links:

• Amazon: When you click links to buy our coloring books on Amazon, you leave our Site and navigate to Amazon's platform. Any purchase or interaction on Amazon is governed by Amazon's own Privacy Notice and Terms of Use.
• Social Media: Links to our social media profiles (Pinterest, Instagram, Facebook) are direct outbound links. They do not load third-party scripts or social widgets on our Site until you choose to click them.

6. Data Retention

Technical server logs are retained by our hosting provider only for transient security and troubleshooting purposes in accordance with standard log retention practices. Email communications are retained only as long as necessary to address your inquiry or meet statutory obligations.

7. Your Rights Under GDPR

As a data subject in the European Union, you hold comprehensive rights regarding your personal information:

• Right of Access (Art. 15 GDPR): Obtain confirmation as to whether your personal data is processed and request a copy.
• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal information.
• Right to Erasure (Art. 17 GDPR): Request deletion of your personal data ("right to be forgotten").
• Right to Restriction of Processing (Art. 18 GDPR): Request restriction of data processing under certain statutory conditions.
• Right to Data Portability (Art. 20 GDPR): Receive personal data you provided in a structured, commonly used format.
• Right to Object (Art. 21 GDPR): Object to data processing based on legitimate interests.

To exercise any of these rights, contact us at hello.fairytalecompass@gmail.com. We respond to verified requests promptly within 30 days without charge.

8. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with your local supervisory authority or with the Comissão Nacional de Proteção de Dados (CNPD).