Privacy

1. Controller

[REGISTERED LEGAL NAME], [STREET, CITY, POSTCODE, COUNTRY], [ORDERS@DOMAIN].

2. The evidence list (waitlist)

If you join the evidence list we store your email address, the time of your consent, the city and country you give us, a case number (e.g. FC-1984-00428 — an internal reference, nothing more), an optional embroidery preference, the piece you asked about (e.g. FC-03), the link you arrived from (a short code, e.g. tt-0001), a one-way hash of your IP address and browser string (spam protection, not identification), and the page you joined from. Legal basis: your consent (Art. 6 (1) a GDPR). Purpose: to write to you about Drop 001 — when preorders open and when they close — and nothing else. Storage: until you leave the list or the drop is dispatched plus 30 days. Withdraw any time using the link at the foot of any message, or by writing to [ORDERS@DOMAIN]; the Ministry removes you without argument.

City and country. We ask for these so we know where the edition would have to be posted, and how many of each piece to have made for a region. They are used as counts by country and city; no street address is collected until you place an order. Your browser is never asked for its GPS location. Where you leave the fields blank — for example a signup queued on your device before the fields existed — we record the country the hosting network already sees on the request (an approximate, IP-derived country and city, stored separately and marked as such) so the count is not silently wrong. Nothing here identifies you beyond the address you gave us.

The delay is deliberate. The first message is handed to our mail provider at once but scheduled for delivery between 11 and 47 minutes later. Nothing is being computed about you in the meantime; an instant automated reply to a form is the behaviour this project exists to criticise, so we do not perform one. The scheduled time is stored against your row.

Double opt-in. After you join we send one message asking you to confirm the address. Until you confirm, the entry receives nothing further; if you never confirm, no campaign message is ever sent to it. We record which of the five Drop 001 messages have been sent to your address, and whether the send succeeded, so that you are never written to twice. We do not track whether you opened a message or which links you clicked in it.

3. Orders

Payments are processed by Stripe Payments Europe, Ltd. (Ireland). Stripe receives the data needed to take payment and collect a shipping address; see stripe.com/privacy. We store your order (items, amount, email, shipping address, Stripe reference) to fulfil the contract (Art. 6 (1) b GDPR) and for as long as commercial and tax law require (§ 147 AO, § 257 HGB: 6–10 years). Your address is passed to the carrier for delivery.

4. Tracked links

Links of the form /go/… in our social posts count clicks per post and per piece (aggregate only), storing a one-way hash of IP and browser string. Legal basis: legitimate interest in knowing which posts work (Art. 6 (1) f GDPR). No profile is built; the hash cannot be reversed.

5. Hosting and processors

The site is hosted by Vercel Inc. (USA; EU-region edge, standard contractual clauses); the database by Supabase (project region: EU, Frankfurt). Server logs (IP, request, time) are kept by the host for security for a short period. Campaign and confirmation email is sent through [EMAIL PROVIDER — Resend, Inc., with a data-processing agreement, once the account is opened], which receives your email address, the message itself, and the time it is to be delivered. Messages come from FACECRIME // EVIDENCE DESK, evidence@facecrime.emmapulbrook.eu.

6. Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — write to [ORDERS@DOMAIN]. You may complain to a supervisory authority; for Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

7. Cookies and analytics

Before you choose, nothing is stored. Google Tag Manager (container GTM-TMLPHPGZ) and Google Analytics 4 (G-6VN5VGHZ5G) load on every page in Google Consent Mode with analytics_storage and all advertising categories set to denied. In that state no analytics cookie is written.

If you press Allow counting, Google Analytics sets cookies (_ga, _ga_*, typically 2 years) and processes your IP address, page URLs, referrer, approximate location, device and browser to produce visit statistics. Legal basis: your consent (Art. 6 (1) a GDPR; § 25 (1) TTDSG). Processor: Google Ireland Limited, with transfers to Google LLC in the USA under the EU–US Data Privacy Framework and standard contractual clauses. We have not enabled Google Signals, advertising personalisation or data sharing for advertising purposes, and we do not sell data.

If you press Decline, the tags stay denied and no analytics cookie is written. Your choice is remembered in your browser's local storage under facecrime.consent. To change or withdraw it, clear that entry in your browser (Settings → site data for this site) and the banner returns; you can also block the domain googletagmanager.com outright and the site works normally. Withdrawal has no effect on processing carried out before you withdrew.

Your bag and any queued evidence-list signup live in your browser's local storage on your device and are never sent anywhere except when you submit them.