Privacy Policy

Data controller

The controller of your personal data is Leira Studio (Ariel Janiuk). Privacy contact: contact.leirastudio@gmail.com.

Scope

This policy covers the Leira Studio site (portfolio, news, community, project support, and related forms). It only describes what the site actually does.

Community accounts

When you register, we process your email address, username, display name, and a password hash (we do not store plaintext passwords). You may also sign in with Google or Facebook — in that case we receive from the provider only your name, email address, and profile picture, if you share them. In account settings you can add a bio and avatar/cover URLs.

Comments

Signed-in users comment from their account. Guests provide a public name (or nick) and may optionally leave a private email address (not shown publicly). Comment text is published with the relevant post or project.

Community chat

In community chat we store message text, a nickname (for guests) or the account link (for signed-in users), optional project/post references, and a hashed IP address — only for abuse prevention and moderation. You can edit or delete your message within 15 minutes. Reports go to the moderator. We keep this data as long as needed for chat operation and safety, then delete or anonymize it.

Community posts

If you publish a community post, we store the post content and data linked to your account (author). Posts may include media or links you add yourself.

Newsletter

We send the newsletter only with your consent — given at account signup, via the homepage form, or in account settings. We store your email address and an unsubscribe token. You can withdraw consent at any time via the link in each email or the Newsletter toggle in account settings. After you unsubscribe, we mark the subscription as ended.

Contact form

The contact form sends us your name, email, and message so we can reply. Your message is delivered to us by email and stored privately in the studio’s admin panel solely to respond to you. We delete it on request.

Donations / support

Payments are processed by external providers: Stripe (card / BLIK), PayPal, Przelewy24, and optionally a traditional bank transfer. We do not store card numbers. In our database we keep items such as payment status, amount, currency, provider, a link to a project or account (if you are signed in), and your chosen support privacy options (e.g. anonymity). Card data stays with the payment operator.

Monthly support: your card details are stored only by Stripe (not by us), and only while the subscription is active. You can cancel anytime via the link in your receipt email or in your account settings.

First-party analytics

We collect basic first-party stats: page views (path + day) and unique visitors based on an anonymous browser id in localStorage, without country, without IP address in those aggregates, and without account data. The id is not hashed on the server — it is a random UUID created in the browser.

Cookies and similar tech

We use essential cookies and local storage: community login session (ba prefix, e.g. ba.session_token), admin panel session (admin.session-token) when applicable, language (NEXT_LOCALE), support currency preference (ls_currency), and an anonymous visit id in localStorage (leira-vid). Cloudflare Turnstile cookies may also appear on bot-protected forms when that protection is enabled.

Hosting and email

The site is hosted on Cloudflare infrastructure (Workers / related services). Transactional and newsletter emails are sent from the studio’s official Gmail account (Gmail API), or via Resend when Gmail is not connected.

Retention

Account data is kept while the account exists. Comments and community posts until they or the account are deleted. Newsletter subscription until you unsubscribe. Analytics aggregates and donation records are kept as long as needed to run the site, for accounting, and for legal duties, then deleted or anonymised when no longer needed.

Your rights (GDPR)

You have the right to access, rectify, erase, restrict processing, object to processing, and lodge a complaint with a supervisory authority (in Poland: PUODO — President of the Personal Data Protection Office). For privacy requests email contact.leirastudio@gmail.com.

Deleting your account

You can delete your community account in Settings → Delete account, or by emailing contact.leirastudio@gmail.com. Deleting a community account does not affect a separate admin-panel account.

Updates

Last updated: 5 October 2026. If we make material changes, we will update this page.