Privacy Policy
In effect as of 30 Sept 2026.
1. Data controller
Pilvenhattara Digital Oy (Business ID 3652801-8), Tyrväänkatu 39, 38200 Sastamala, Finland. Contact for privacy matters: info@fluffycloud.fi.
2. Data we process
We process the following data: photos you upload to the service (a face photo, an action photo, and any club or sponsor logo); details you enter for the poster (first name, last name, team, jersey number, sport); the email address you provide to Stripe when paying; your order number; and technical log data (such as IP address and browser information) generated through our use of Vercel hosting.
3. Purpose and legal basis
Uploaded photos and submitted details are processed to create and deliver your ordered poster — the legal basis is the contract formed by your order. Technical log data is processed to ensure the security and reliable operation of the service — the legal basis is our legitimate interest.
4. Minors in photos
Photos uploaded to the service often show minor athletes. Whoever uploads a photo must be the guardian of the person shown, or must have the guardian's permission to use the photo in this service.
5. Recipients and processors
We use the following processors: Vercel Inc. (hosting platform and file storage, servers in the EU and the United States), Stripe Payments Europe, Ltd. (payment processing) and OpenAI (AI-generated background images). Your uploaded photo is NEVER sent to OpenAI — only a text description is sent to OpenAI to generate the background; background removal and person detection are performed locally on our server without any external AI service. Where data is transferred outside the European Economic Area (to the United States), the transfer relies on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
6. Retention periods
The finished poster, its preview, the related Instagram images, and your order details are kept in the service for 3 days after your order is completed, after which they are automatically deleted. The original photos you uploaded are deleted within 48 hours of placing your order. Payment transaction data processed by Stripe is retained by Stripe under its own terms and applicable accounting law (six years) — we do not store card details ourselves.
7. Cookies and tracking
The service does not use marketing cookies and does not maintain a newsletter list. We use Vercel Analytics and Vercel Speed Insights to measure visitor numbers and site performance; these do not collect personally identifying data for advertising purposes.
8. Your rights
You have the right to access, correct, and request deletion of your data, as well as other rights under the EU General Data Protection Regulation. Contact us at info@fluffycloud.fi. If you believe your data has not been processed appropriately, you may lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).