The short version
This site sets no cookies for visitors, runs no analytics and no advertising, and loads nothing from other companies’ servers. It keeps personal data in only three cases, each of which you start yourself: when you subscribe to release notes, when you open a support ticket, and when you write through the contact form.
Who is responsible
FantasyThemes is run by Alex Gurghis, in Chișinău, Republic of Moldova. He is the controller of the personal data described here. For anything about your data, write to [email protected].
When you only visit
To send you a page, the server and the network in front of it have to process your IP address and what your browser says about itself. They keep this in short-lived technical logs, which are used to keep the site running and to stop abuse. The legal ground is the legitimate interest in running a secure site.
The site itself sets no cookies for visitors. Cloudflare, the network in front of the site, may set a security cookie in the rare case that it has to check that a connection is not automated.
When you subscribe to release notes
The site stores your email address, your name if you give it, and the dates on which you signed up and confirmed. You confirm by email before anything is sent, so the legal ground is your consent. Every email has a one-click unsubscribe link, and you can withdraw your consent at any time.
The list is kept with the EventMail plugin in this site’s own database and the emails are sent from the site’s own server. They contain no tracking pixels and no rewritten links. Your details are kept until you unsubscribe.
When you open a support ticket
A ticket stores your name, your email address, the product, your purchase code, the address of your site if you give it, your message and any screenshots you attach. This is needed to give you the support that comes with your licence.
- The purchase code is sent to Envato, the company behind ThemeForest, to confirm the licence. Envato answers with the name of the item the code belongs to.
- The ticket is emailed to FantasyThemes, and a confirmation with a copy of your message is emailed to you.
- To limit abuse, a scrambled form of your IP address is kept for one hour and then discarded.
Tickets are kept for as long as they are useful for supporting you and as a record of what was said, and are deleted when you ask.
When you write through the contact form
The site stores your name, your email address and your message in order to answer you, and emails you a confirmation. Messages are kept for as long as the conversation is useful and are deleted when you ask.
When you buy a theme
Themes are bought on ThemeForest. Payment and invoicing are handled by Envato under its own privacy policy. This site never sees your payment details.
Who else handles the data
Your data is not sold and is not shared for advertising. Three companies are involved in running the site:
- Hetzner Online GmbH provides the server, which is in Germany.
- Cloudflare, Inc. runs the network in front of the site, which delivers pages and filters abusive traffic. It operates worldwide.
- Envato confirms purchase codes, as described above.
The data is stored on the server in Germany. FantasyThemes works from the Republic of Moldova, so tickets and messages are read from there.
Your rights
You can ask what is stored about you and receive a copy of it. You can ask for it to be corrected or deleted, ask for its use to be restricted, or object to its use. Where the ground is your consent, you can withdraw it at any time. Write to [email protected]; you will have an answer within one month.
If you think your data has been handled wrongly, you can also complain to the data protection authority of the country you live in.
Changes to this page
When what the site does with personal data changes, this page changes with it. The month of the last change is shown at the top.