Privacy Policy

This policy explains how DARTZ GRUPA OÜ ("we", "us") handles your personal data when you use the DARTZ Nightshark store: when you browse it, buy a spot on the car, create an account or run a creator page. DARTZ GRUPA OÜ is the data controller.

DARTZ GRUPA OÜ, registry code 11553015, Maakri tn 19/1, 10145 Tallinn, Estonia. Contact for privacy questions: [email protected].

• Contact details: your email address, which we use to send your login links, order confirmation and the link for your artwork.
• Gamer tag: the optional username you give at checkout or in your account.
• Orders: the spots you hold and buy (size, position on the car, serial number), prices, dates, the creator page you bought through, and the production status of your spot.
• Payments: payments are handled by Stripe (cards, Apple Pay, Google Pay) and CoinGate (crypto). We receive a payment reference and the amount. We never see or store your full card number or wallet keys.
• Artwork: what you send for your spot (an image or other file, a line of text, or the characters of a mark), and a record that you confirmed you may use it, with the date and time and which version of our Artwork Terms you saw.
• Creators and partners: your name or company name, email, address and country, your registration number or date of birth, your VAT number if you have one, the person who signs for you, the content of your page, sales figures, invoices, evidence of your business registration if you send it, and the bank details you give us so we can pay you. This includes the websites we pay for sending us buyers through a referral link: their name, contact email and bank details.
• Technical data: cookies that keep you logged in and keep your cart, and the IP address of requests, used for security and to limit abuse.
• Page view counts: when you open a creator's page we add one to that page's daily total, so the creator can see how many people visit. We store only the total, no cookies and nothing about you; your IP address and browser are used for that moment only, to skip reloads and bots.
• Referral links: some websites send visitors to the store through a link of their own. Opening one adds one to that website's daily total of visits, counted like page views: only the total, no cookies and nothing about you. If you add a spot to your cart on that visit, your order records which website's link you came through, so the website can be paid a share of the sale. Only the visit that followed the link counts: if you come back later without it, or reach the store some other way, nothing connects you to the website, and an order you have already started keeps the website it started with.
• Analytics: if you consent, usage statistics collected by Google Analytics: the pages you visit, the website that sent you, your approximate country and device type. Never your email, name or order details.

• To fulfil your order (performance of a contract): holding and selling your spot, taking payment, collecting and checking your artwork, putting it on the car and keeping you updated.
• To show approved artwork (performance of a contract, and the permission you give when you send it): on the car, and in renders, photos and video of the car and in NIGHTSHARK project material.
• To work with creators and partners (performance of a contract): showing them their sales, receiving their invoices and paying their share.
• To pay the websites that send us buyers (legitimate interest): recording which referral link an order came through and working out the share the website is paid. We give the website a statement of what it earned. It does not include your name, your email address or what you sent.
• To run your account (performance of a contract): logging you in and showing your spots.
• To keep the store safe (legitimate interest): preventing fraud and abuse, keeping records of who bought which spot, and keeping backups.
• To show you on the leaderboard (consent): only if you ask for it at checkout or in your account. You can withdraw it at any time.
• To improve the store (consent): analytics, only if you agree.
• To meet legal obligations: keeping accounting and tax records, and withholding tax from a payment where the law requires it.

If you choose to appear on the leaderboard, your gamer tag (or “Anonymous” if you haven't set one) and the space you own are public. If you share your order picture, it shows your spots and gamer tag, but never your email or what you paid. No part of your email address is ever shown publicly.

Artwork we approve goes on the car, in public view, and we may show it in renders, photos and video of the car and in NIGHTSHARK project material, so only send what you are happy to have shown. Until then it is private: our team can see it, and so can the customer or owner of the vehicle, who can also approve or reject it.

We use trusted service providers who process data for us under contract:

• Stripe (card, Apple Pay and Google Pay payments)
• CoinGate (crypto payments)
• Vercel (hosting and file storage)
• Neon (database)
• our email delivery provider (sending your emails)
• Google (analytics, only with your consent)
• our bank, when we pay a creator

The customer or owner of the vehicle may see the artwork sent for it, as described above. Creators see the gamer tags of buyers in their zone and their own sales figures, including refunds that change their share, not buyers' email addresses. We do not sell your personal data. We may disclose it where the law requires.

Some providers process data outside the European Economic Area. Where they do, the transfer is protected by the European Commission's standard contractual clauses or another approved safeguard.

• Orders and payment records: as long as accounting and tax law requires, and at least as long as your spot is on the car.
• Artwork you send: as long as your spot is on the car. If you replace a file, the old one is deleted. The record that you confirmed you may use it is kept with your order.
• Invoices, payout details and other records about creators and partners: as long as accounting and tax law requires.
• Referral links: the daily total of visits is kept as long as we work with the website; the record on an order of which link it came through is kept with the order.
• Your account: until you ask us to delete it.
• Login links: they expire after 24 hours.
• Unpaid holds: released after a short time; the related data is removed or kept only as part of our security records.
• Backups: kept for a limited time and deleted on a rolling basis.

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw your consent at any time (this does not affect what we did before). Some data we must keep by law even if you ask us to delete it.

To use any of these rights, contact us at [email protected]. You can also complain to a data protection authority: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or the authority where you live.

We use cookies that are needed for the store to work: to keep you logged in, to keep your cart and to remember whether you read sizes in centimetres or inches. Google Analytics cookies are only used if you allow them; you can change your choice with “Cookie settings” at the bottom of every page.

We protect your data with encrypted connections, access controls and regular backups. No system is completely secure, but we work to keep your data safe and will tell you and the authorities about a serious breach as the law requires.

The store is not meant for children under 16. If you are under 16, please ask a parent or guardian to buy for you.

We may update this policy. The date at the top shows the latest version, and every order records the version that was accepted.