Privacy & Cookies Policy

Last Updated: July 23, 2026

This policy explains what personal data is collected on GrayDarth.com and around my services (store, commissions, newsletter), why, and what your rights are under the GDPR.

01Data controller

02Scope of this policy

This policy applies to GrayDarth.com and to the data I process around my services: the live wallpaper store, custom commissions, the newsletter, and business inquiries. Purchases are processed through third-party checkouts (Gumroad, Stripe, PayPal, Etsy); those platforms also act under their own privacy policies. Social platforms I link to (TikTok, Instagram, YouTube, Pinterest, Discord, Patreon) process your data under their own policies.

03Data I collect

Data you provide directly

• Newsletter: your email address, used to send updates, releases and drops. Unsubscribe anytime via the link in each email.
• Contact & commissions: when you email me or book a commission, I receive your name, email, and the details you share about your project.
• Purchases: when you buy through Stripe, Gumroad or PayPal, the checkout collects your name, email and billing address, and shares with me what I need to deliver your order and issue an invoice. I never see or store your full card details — payment data is handled by the payment processor.

Data collected automatically

• Cookies & similar technologies: small files placed on your device (see section 05), which may process your IP address, browser type, device and pages visited.
• Analytics & tags: this site uses Google Tag Manager, Google Analytics and the Meta (Facebook) Pixel to measure audience and content performance. These trackers only run with your consent via the cookie banner.
• Affiliate tracking: outbound links to partners (e.g. Amazon, Sideshow, Instant Gaming) may use tracking parameters or cookies so partners can attribute referrals. I only receive anonymous referral statistics.

Note: the site has no comment system or forum; no public user-generated content is collected.

04Purposes & legal bases (GDPR)

• Performing a contract — delivering your order or commission, sending files, providing support.
• Legal obligations — issuing and keeping invoices and accounting records as required by French law.
• Consent — newsletter, and all non-essential cookies (analytics, pixel, marketing). You can withdraw consent at any time.
• Legitimate interest — site security, fraud prevention, and answering your messages.

05Cookies & tracking

• Essential cookies — required for the site to function (including language preference and cookie-consent choice). Always active.
• Analytics cookies — Google Analytics (via Google Tag Manager), used to understand how visitors use the site. Loaded only with your consent.
• Marketing / pixel cookies — Meta (Facebook) Pixel, used to measure content performance. Loaded only with your consent.
• Affiliate cookies — set by partners when you click outbound affiliate links, governed by the partner's own policy.

You can change your choice at any time via the cookie banner, and control or delete cookies in your browser settings. Refusing non-essential cookies never blocks access to the site.

06Third parties & processors

I never sell or rent your personal data. It is shared only with the providers needed to run my services, each bound by their own GDPR commitments:

• Hosting: IONOS (website), WordPress/Elementor infrastructure.
• Payments & store: Stripe, Gumroad, PayPal, Etsy.
• Memberships & community: Patreon, Discord.
• Email / newsletter: my email and newsletter service providers.
• Measurement: Google (Tag Manager, Analytics), Meta (Pixel).
• Legal or regulatory requests: data may be disclosed if required by law or lawful authority.

07International transfers

I am based in France and your data is primarily processed in the European Economic Area. Some providers (e.g. Google, Meta, Stripe, Gumroad, PayPal) may process data in the United States or other countries; in such cases, transfers rely on safeguards recognised by the GDPR, such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.

08Data retention

• Newsletter: until you unsubscribe.
• Inquiries & commission exchanges: as long as needed to handle the project, plus a reasonable period for record-keeping.
• Orders, invoices & accounting records: 10 years, as required by French commercial law.
• Cookies: lifetimes as shown in the cookie banner; consent choices are re-asked periodically.

09Your GDPR rights

You may at any time exercise your rights of access, rectification, erasure, restriction of processing, data portability, and objection, and withdraw any consent you have given (e.g. newsletter, cookies) without affecting prior processing.

To exercise them, write to contact@graydarth.com — I answer within the legal timeframe. You may also lodge a complaint with the French supervisory authority, the CNIL.

10Security

I apply reasonable technical and organisational measures to protect your data (HTTPS, trusted processors, restricted access). No transmission over the Internet can be guaranteed 100% secure; you share data online at your own discretion, and I will notify you and the CNIL of any breach as required by law.

11Children's privacy

This website is not directed to children under 16, and I do not knowingly collect their personal data. If you believe a child has provided personal data, contact me and I will delete it promptly.

12Changes & contact

This policy may be updated to reflect changes in my services, tools or legal obligations; the date above shows the latest version. For any question about this policy or your data:

GrayDarth — Pierre Lacaille
contact@graydarth.com
graydarth.com

See also the Terms of Service governing purchases, commissions and use of the site.

© 2026 GrayDarth — Pierre Lacaille · All rights reserved