Privacy
Updated 2026-09-18
Who is responsible?
Lucas Gironde Da Silva, individual entrepreneur and operator of UIFN, is the data controller. Address: 6 allée des Prés, 77184 Émerainville, France. For privacy requests, contact contact@uifn.shop.
Purchases and access to files
We process your checkout email, purchased product, price, payment status, order and payment identifiers, receipt delivery status and access session. This is necessary to fulfil your purchase, deliver files and recover access. Mandatory accounting records are processed to meet legal obligations. Payment card details are entered in Stripe and are not stored by UIFN.
Your email is required for purchase recovery and receipts. We do not use it for advertising or a mailing list. Login events record your email and sign-in time for account security; anonymous browsing statistics are not linked to that email.
Invited creator workspaces
For invited creators, UIFN stores the invitation email, display name, optional biography, workspace status, product drafts and uploaded files to provide and secure the workspace. These preparations are accessible to their creator and the store operator. Preview images are served through unlisted URLs; downloadable ZIP files require an authenticated, authorised session.
The creator session uses a separate essential HttpOnly cookie that expires after 24 hours. Invitation links expire after seven days; email sign-in links expire after 15 minutes. Links can be used once. Creator pages are excluded from audience measurement. If Stripe setup is enabled and a creator chooses to connect, UIFN sends the profile name, email and selected business country to Stripe and stores the resulting account identifier and setup status. Identity documents and bank details are submitted directly to Stripe. Contact us to close a workspace and request deletion; records required for security or legal obligations may be retained.
Cookies and browser storage
UIFN uses an essential HttpOnly session cookie for checkout and access to purchases. It expires after 24 hours. Signing out removes access on that device. A checkout request identifier is stored locally to safely retry payment creation after a refresh; it is not an advertising identifier. You can clear it in your browser settings.
We do not set advertising cookies or load an advertising analytics SDK. Our own audience measurement creates a fresh random identifier in page memory, without an analytics cookie or persistent visitor identifier.
Audience measurement
We count page views, recent page activity, referring website names, a campaign source when present, and country. We do not collect the referring URL path or query, precise location, or the contents of form fields for analytics. These limited statistics help us operate and improve the store, on the basis of legitimate interests. Page activity records are removed after one day and aggregate statistics after 90 days. A page visit is not a unique person.
You may disable this measurement below. Your choice is stored only to remember this preference. Global Privacy Control and Do Not Track are also respected.
Security and retention
Cloudflare receives IP addresses and technical request information to deliver and protect the service. The application uses short-lived hashed IP rate limits to prevent abuse. Sign-in links expire after 15 minutes and can be used once. Customer login history is kept for up to 90 days.
Order records remain available to provide purchased downloads, handle complaints and meet accounting or legal requirements. Their retention is reviewed when access ends or you request deletion; records required by law may be restricted and retained instead of erased. Operational backups support recovery. Provider security and email-delivery logs have their own retention schedules.
Service providers and transfers
Cloudflare hosts and protects the site and stores the catalog, orders and private files. Stripe processes payments and fraud prevention. Resend delivers receipts and sign-in messages. Access is limited to the store operator and providers needed for these purposes. These providers may process data outside the European Economic Area under their applicable transfer safeguards; provider information and contact details are available in their privacy documentation.
Your rights
You can request access, correction, deletion, restriction, portability where applicable, or object to processing based on legitimate interests by contacting contact@uifn.shop. We may need proportionate identity verification to protect your purchases. We normally respond within one month, subject to statutory extensions. You can also lodge a complaint with the CNIL. No automated decision with legal or similarly significant effects is made by UIFN's audience analytics.