Privacy Policy

1. Data controller

The controller of your personal data is Moonlight. Contact: kontakt@howtodraw.pl.

2. What data we collect

Registration and account: email address, password (hashed), username, registration date
Profile: avatar, description, linked creator accounts (comics, books, music, fanpage), privacy preferences
Content: published comics, chapters, books, music, posts, comments, private messages
Payments: for Stripe purchases – transaction data (amount, currency, status); card data is not stored by us (handled by Stripe)
Referral program: email, name (from part before @), referral link, click and donation statistics
Technical: IP address, User-Agent header, server logs, cookies

3. Purposes and legal bases for processing

Contract performance (Art. 6(1)(b) GDPR): registration, platform services, payments, subscriptions
Consent (Art. 6(1)(a) GDPR): referral program registration, newsletter (if enabled), marketing
Legitimate interest (Art. 6(1)(f) GDPR): abuse prevention, content moderation, technical analytics, security
Legal obligation (Art. 6(1)(c) GDPR): accounting documentation retention, user rights fulfillment

4. Data recipients

Data may be shared with:

Hosting and technical service providers
Stripe (payments) – according to their privacy policy
Analytics (e.g. Google Analytics, Hotjar, Clarity – if configured)
Public authorities – upon request under applicable law

5. Retention period

Account: until account deletion by user or administrator
Accounting documentation: as required by law (e.g. 5 years)
Server logs: technically necessary period (usually up to several months)
Cookies: according to cookie settings (session – until browser close; persistent – per cookie policy)

6. Your rights (GDPR)

You have the right to:

Access to your data (Art. 15 GDPR)
Rectification of data (Art. 16 GDPR) – you can edit your profile in settings
Erasure of data (Art. 17 GDPR) – you can delete your account; some data may be retained under law
Restriction of processing (Art. 18 GDPR)
Portability of data (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Withdraw consent – at any time, without affecting lawfulness of processing before withdrawal
Lodge a complaint with a supervisory authority

Contact regarding rights: kontakt@howtodraw.pl.

7. Cookies

The platform uses cookies to:

maintain user session (required for login)
remember preferences (e.g. language, light/dark theme)
analytics and service quality improvement (if enabled)

You can manage cookies in browser settings. Disabling essential cookies may limit site functionality.

8. Security

We apply technical and organizational measures to protect data from unauthorized access, loss or destruction, including encrypted transmission (HTTPS), hashed passwords, access control.

9. Policy changes

We may update this policy. We will notify you of significant changes via the platform or email. Continued use after changes means acceptance of the updated policy.

10. Contact

For questions about this privacy policy, contact: kontakt@howtodraw.pl.