Privacy Policy

Last updated: 28 August 2026

Creativate Studios Oy ("we", "us", "our"), a company registered in Finland, operates wishes. As a Finnish company, we process personal data in accordance with the EU General Data Protection Regulation (GDPR). This policy explains what data we collect, why, and what rights you have over it.

What we collect

Your card content. The personalization text you type into the editor (names, ages, dates, and messages) is used to render your preview and, if you purchase, your final files. It is not tied to an account — there is no sign-up.

Your email address. Collected when you place an order, used to send you your download link and order confirmation, and to let you recover a lost download link later viaFind my order.

Basic technical logs. Like virtually any web service, our hosting infrastructure (Cloudflare) automatically logs request metadata (IP address, timestamps, basic request details) for security and operational purposes.

Aggregate site analytics. We use Cloudflare Web Analytics, a privacy-first analytics service that does not use cookies or any client-side storage, and does not track individual visitors across sites.

Payment information. We never see or store your card details. Payment is handled entirely by Paddle.com, our Merchant of Record — see their ownPrivacy Notice for how they handle payment data.

Why we process it (legal basis)

We process your card content and email address on the basis of contract performance — it's necessary to provide the design/download service you're using and, once you purchase, to fulfil that order. Basic technical/security logs are processed under ourlegitimate interest in keeping the Service secure and operational.

Who we share it with

We use a small number of service providers ("processors") to run wishes.:

• Cloudflare — hosting, storage, and the server-side rendering that generates your files.
• Paddle.com — payment processing and billing, as our Merchant of Record.
• Resend — delivery of your order confirmation and download-link emails.

Some of these providers may process data outside Finland/the EU (for example, on infrastructure located in the United States). Where that happens, we rely on the provider's own compliance mechanisms (such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses) for the transfer. We don't sell your data to anyone, ever.

How long we keep it

We keep your order and personalization data for as long as reasonably necessary to provide the download and recovery service — in practice, no longer than 24 months after your last order, unless a longer period is required for legal, tax, or accounting reasons. You can request earlier deletion at any time (see "Your rights" below).

Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to certain processing
• Receive your data in a portable format
• Lodge a complaint with your local data protection authority — in Finland, theOffice of the Data Protection Ombudsman

To exercise any of these rights, emailwishes@digitalartsyhut.com. We'll respond within one month, as required by GDPR.

Contact

Questions about this policy or how we handle your data? Contact us atwishes@digitalartsyhut.com.