Legal information
Privacy policy
Last updated: 19 juillet 2026
1. Data controller
Corentin Quivoron
Sole trader (French micro-entreprise)
6 rue des Fonds Verts, 75012 Paris, France
SIRET: 107 548 109 00019 — SIREN: 107 548 109
APE code: 58.29C
VAT not applicable, article 293 B of the French General Tax Code
Contact: contact@glowy.pro
As no large-scale processing of sensitive data is carried out, no Data Protection Officer is required (article 37 GDPR).
2. Data collected
No account is created to buy on glowy.pro. The data processed is:
- Order data: email address, amount, order contents, language, payment session identifier;
- Payment data: processed exclusively by Stripe — the site stores no card details;
- Technical data: IP address and server logs required for operation and security;
- Local preferences: chosen language (cookie) and cart contents (browser local storage, never sent to our servers before checkout).
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Order processing and file delivery | Performance of the contract (art. 6.1.b GDPR) |
| Retention of accounting records | Legal obligation (art. 6.1.c GDPR) |
| Site security and fraud prevention | Legitimate interest (art. 6.1.f GDPR) |
| Replying to email enquiries | Legitimate interest |
No commercial prospecting is carried out without consent. No data is sold, rented or transferred to third parties.
4. Processors
| Processor | Role | Location | Transfers |
|---|---|---|---|
| Vercel Inc. | Application hosting | USA | Standard contractual clauses |
| Supabase Inc. | Database and file storage | European Union | — |
| Stripe Payments Europe Ltd | Payments | Ireland (EU) | — |
| Resend Inc. | Transactional emails | USA (EU sending region) | Standard contractual clauses |
5. Retention periods
| Data | Period |
|---|---|
| Orders and accounting records | 10 years (French Commercial Code, art. L.123-22) |
| Download links | Automatic expiry after 72 hours |
| Technical logs | 12 months |
| Contact emails | 3 years from last exchange |
6. Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, portability, objection, and the right to give post-mortem instructions. Exercise them by email at contact@glowy.pro (reply within one month at most). You may lodge a complaint with the French supervisory authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr).
7. Security
- encrypted communications (HTTPS/TLS);
- original files stored in a private space, accessible only via temporary signed links;
- database access partitioning (row level security);
- cryptographic verification of payment notifications (Stripe signature).
8. Cookies
The site uses only strictly necessary trackers: a language-preference cookie and local cart storage. These are exempt from consent (article 82 of the French Data Protection Act). No advertising, analytics or third-party tracking cookies are set — which is why no consent banner is displayed.
9. Changes
This policy may be amended; the date of the latest update appears at the top of the page.