Privacy Policy
Last updated: 2 October 2026
Who is responsible
This notice describes how the personal project Startup Ronaldete, presented as Crista Ronaldo, uses information.
What we collect and why
- What you provide when supporting the project: the name, color and link you choose, and the image you upload. These are shown publicly on the statue, the feed and the leaderboard. These are the digital rewards associated with your contribution. Do not submit private information for public display.
- Payment: handled by Stripe. Stripe collects your payment details and email under its own privacy policy. We store the amount, payment status and Stripe session identifier linked to your contribution. Card details are not stored in our database.
- Your username and device session: when you choose a username, we create an anonymous session for this browser (a random identifier, no email or password) and store it in your browser's local storage, so the site recognises you next time. We keep your username, color, free pixel balance and the time you were last active (needed to count free pixels fairly).
- Chat: your messages are public and shown with your username. We keep which session wrote each message privately, for moderation. Messages are automatically deleted after about 7 days.
- Links: when you add a link, we check it automatically; if the Google Safe Browsing service is enabled, the link address is sent to Google for that check.
- Your browser: besides the session above, we store your username and whether you dismissed the beta notice in local storage. The admin area uses a separate login session. We do not add advertising or analytics cookies. If a bot check (Cloudflare Turnstile) is enabled, Cloudflare processes technical data to tell people from bots. Stripe may use payment and fraud-prevention technologies on its own checkout.
- Technical logs: our hosting providers (Cloudflare and Supabase) may keep standard technical logs, such as IP address and time of request, for security.
Who processes the data
Supabase (database, file storage, real-time updates), Stripe (payments) and Cloudflare (website hosting). These providers process information to deliver their services under their own terms and privacy notices. Stripe also processes information for its own payment, security and legal purposes. Processing may take place outside the EU.
Moderation and acceptance records
We record the version of the terms accepted and the time of acceptance with your order. Administrators can remove images, hide public names and links, delete chat messages and mute users who break the rules. Moderation actions are logged privately. Reloading the site applies the latest moderated state.
How long we keep it
Your public content stays while it is on the statue. Purchase records are kept for as long as accounting and tax law requires.
Your rights
Applicable data protection rights, including access, correction, deletion and objection, remain unaffected. You can also complain to your data protection authority (in Portugal: CNPD).