Your data, in the open

The controller is Justin Deboves, a French sole trader (entrepreneur individuel) trading as Aloha Pixel, whose full details appear in the legal information above.

For any question, or to exercise your rights, there is one address: contact@alohapixel.com. No dedicated department, no form to fill in: the person who wrote this site is the one who answers.

When you buy a theme or the pass: your email address, your billing address, the amount, the currency and the payment session identifier. This data lives in a Cloudflare D1 database hosted in the European region.

When you write through the contact form: your name, your email address, your subject, your message, the language you would like an answer in, and the country code provided by the network. Your IP address is read to limit abuse and is never stored.

When you sign in: your email address and the timestamp of the request. The six digit code is never stored anywhere: it is recomputed on the fly to be checked.

When you join the release list: your email address, the language of the page, the page you signed up from, the country code provided by the network, and an unsubscribe token. This is used only to tell you when a new theme ships, and it is deleted the moment you unsubscribe, which takes one click and no sign in.

When you ask for access to the private repository: your GitHub username, kept with your order so we know who access was opened for.

When you browse: nothing leaves until you have chosen. Analytics and the tools described in the next section only load after your consent, given in the consent bar.

The site uses Cloudflare Zaraz, which only runs a tool with your consent, collected by the bar on first display. Your choice is remembered in the zaraz-consent cookie and can be changed at any time from this page, with the button below.

Analytics, if you accept it: Google Analytics 4, to count page views and know where traffic comes from. The IP address is masked before sending and we pass along nothing that could identify you.

Advertising and social media, if you accept it: the Meta pixel and embedded Instagram content. Off by default, never loaded without your explicit consent.

Refusing changes nothing about your visit: the site works the same, and so does buying. The only strictly necessary cookies are your account session cookie, which expires after 24 hours, and the one that remembers your language choice.

Performance of the contract: delivering the theme you paid for, giving you access to your licence, and letting you sign in to your account.

Legal obligation: issuing and keeping the accounting records attached to a sale for the period French law requires, and archiving the contract for orders of 120 euros or more.

Legitimate interest: protecting the forms against automated submissions, and answering your messages.

Consent: the release list, and the analytics and advertising tools. You join the list by asking, you leave in one click, and the unsubscribe link is in every email.

Stripe, to take the payment and issue the invoice. No card data goes through this site and none is stored here: the payment happens entirely on a page hosted by Stripe.

Resend, to send the transactional emails: your licence, your invoice, your sign-in code, the receipt for your message.

Cloudflare, which hosts the site, the database and the file you download, and which filters automated submissions with Turnstile.

GitHub, only if you ask for access to the distribution repository: your GitHub username is then passed on to invite you as a reader.

Google and Meta, only after your consent in the bar: masked-IP audience measurement for Google, advertising signals for Meta. Without your consent, nothing reaches them.

Nobody else. Your data is never sold, rented, or handed to a commercial partner.

Orders, invoices and licences: for the duration of the commercial relationship, then ten years under our accounting and contract archiving obligations.

Download links: 7 days, and 5 downloads per theme at most.

Contact messages: 3 years after the last exchange.

The sign-in log: 12 months, and it only serves to limit abuse and trace the origin of an incident.

Your cookie choice: remembered by the zaraz-consent cookie, thirteen months at most, and changeable at any time from this page.

Access, rectification, erasure, restriction, objection and portability. Write to contact@alohapixel.com: the answer comes within a month, and in practice well before.

You may also lodge a complaint with the CNIL, the French supervisory authority, 3 place de Fontenoy, 75007 Paris, www.cnil.fr.

Erasing an order remains limited by our accounting obligations: the invoice itself has to be kept.

In the European Union. The Cloudflare D1 database is served from the European region, and Resend sends from its Irish region.

Stripe and GitHub are American companies: any transfer relies on the European Commission's standard contractual clauses.

No password is created and none is stored: signing in uses a six digit code valid for ten minutes, derived on the fly and never kept. There is no password database to steal.

Traffic is encrypted with HTTPS, service keys live in the host's vault and never appear in the code, and every public form is verified server side before it is accepted.