Privacy
How we handle your data
Last updated:
Data controller
Cosmika : nom commercial de Matthieu Antonin Castellucci, entrepreneur individuel (EI), 47 rue Vivienne, 75002 Paris, France, 107 729 972 R.C.S. Paris. Contact for any data-related question: [email protected].
Principle: only what is necessary
Eonelya does not create customer accounts, uses no advertising cookies, performs no profiling and sells no data. We collect only what is needed to produce and deliver your gift.
Data collected
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Beneficiary first/last name | Personalize the certificate and gift page | Performance of the contract | 3 years after the order |
| Beneficiary email (optional) | Send the gift page link | Performance of the contract | 3 years after the order |
| Giver name (optional) | “Offered by” mention on the certificate | Performance of the contract | 3 years after the order |
| Dedication text (optional) | Printed on the certificate | Performance of the contract | 3 years after the order |
| Gift occasion (optional, fixed list) | Order context, recorded in the private registry with the dedication | Legitimate interest | 3 years after the order |
| Buyer email | Order confirmation, invoicing, support | Contract / legal obligation | 10 years (accounting records) |
| Payment data | Collect payment: gathered and processed by Stripe, never by us | Performance of the contract | See Stripe’s policy |
| Technical logs (IP address, user agent) | Security, fraud prevention, service operation | Legitimate interest | A few days (Cloudflare) |
| Audience measurement (IP address, user agent) | Count visits and checkout steps, without cookies or persistent identifiers | Legitimate interest | Aggregated statistics, see Umami’s policy |
You warrant that you are entitled to provide us with the gift beneficiary’s first name and email address.
Processors and transfers
- Stripe: payment. stripe.com/privacy
- Cloudflare : hosting of the site, API and database. cloudflare.com/privacypolicy
- Resend: delivery of gift emails. resend.com/legal/privacy-policy
- Umami: audience measurement without cookies, persistent identifiers or profiling. The script is loaded from the provider’s servers: your browser’s request sends it your IP address and user agent, used only for aggregate counting. URL parameters are excluded from collection. umami.is/privacy
Some of these providers are established in the United States. Transfers rely on the European Commission’s standard contractual clauses and/or the EU-US Data Privacy Framework.
Local storage (no tracking cookie)
The site uses your browser’s local storage for three strictly functional purposes: remembering your preferred language, keeping your current selection during checkout, and storing the cart. This information stays on your device, is not sent to any third party, and is not used for analytics or advertising, so it does not require prior consent. You can clear it at any time from your browser settings.
The gift page link
The gift page is accessible through a link containing a high-entropy secret token: anyone holding that link can view the gift. It is therefore personal: do not publish it. You may ask us to deactivate a link at any time.
Scheduled gifts
When a gift is scheduled for a future date, the beneficiary’s first name and address are kept until delivery, then for the period shown in the table above. The beneficiary is only notified at the time of delivery: informing them earlier would announce the gift, depriving the giver of what they paid for. This deferral is the one allowed by article 14(5)(b) GDPR, where providing the information would seriously impair the achievement of the purpose of the processing. A delivery date cannot be set more than eighteen months ahead, precisely so that this data is not held indefinitely while waiting, and so that the deferral stays bounded.
Erasure is automatic: a daily task anonymizes dedications that have reached their term: first name, address, dedication text, giver’s name and occasion are erased, and the matching certificates are deleted from our storage. What remains names no one: the registry number, the nebula and the number of shares, which we must be able to link to an invoice.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability over your data. To exercise them, write to [email protected]; we reply within one month. If you are a gift beneficiary and wish your data to be deleted, the same address applies.
You may also lodge a complaint with the French data protection authority, CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).
Security
The site is served over HTTPS, banking data never passes through our servers, access to the gift page is protected by a secret token, and access to the certificate requires that same token. The database is hosted on Cloudflare (D1) and certificates in private storage (R2).
See also: legal notice · terms of sale.