Privacy

Last updated 28 October 2026

The controller is ARLing s. r. o., Ivanská cesta 32E, 821 04 Bratislava, Slovakia, Company ID 56583486. Contact: support@arling.sk.

What stays on your computer

The studio runs in your browser. Your book titles, pen name, puzzles and other settings are never sent to us. The only thing the studio reports, to our statistics, is that a free sample was made and whether it was the print or the e-ink edition. Your licence key, the checkout session id used to renew it and a random identifier for free samples are kept in your browser's local storage, and you can remove them at any time by clearing site data.

What we process

• Payment. Stripe and Link (Sold through Link, LLC), the seller at checkout through Stripe Managed Payments, process your payment details and e-mail address under their own privacy policies. In our Stripe account we see your e-mail address, the name and country given at checkout and the payment and subscription status, but never your full card number. We keep your e-mail address and the name you gave at checkout with the plan, amounts, dates and Stripe reference numbers in our licence and customer records, to issue and renew licence keys, to send a replacement key and for support. There is no automatic deletion period set yet: we delete these records on request at support@arling.sk, except what accounting and tax law makes us keep. Legal basis: performance of the contract.
• Licence check. After you pay, and when your licence is renewed, your browser sends the Stripe Checkout session id to our licence service, which runs on our own server and is reached through Cloudflare Workers (Cloudflare, Inc., as our processor). The service asks Stripe whether the subscription is paid and returns a signed licence key. The key contains a shortened one-way hash of your e-mail address, the plan, the expiry date and the last eight characters of the session id. Legal basis: performance of the contract.
• Website statistics. We count page views and a few actions, such as sample PDF downloads and free samples made in the studio (with their edition), with Umami, which runs on our own server and is reached through Cloudflare Workers. It uses no cookies; it derives the country, region and city from your IP address and does not store the address. Legal basis: legitimate interest in knowing which pages are used.
• Hosting. Our hosting provider may keep standard server logs (IP address, time, page) for security for a short period.

Stripe and Cloudflare may process data in the United States, under the EU-US Data Privacy Framework or Standard Contractual Clauses.

We do not sell personal data and do not use advertising trackers.

How long

Payment and invoicing records are kept as long as Slovak accounting and tax law requires. Licence and customer records are kept until you ask us to delete them (see Payment above). Support e-mails are kept while needed to help you.

Your rights

You may ask for access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interest, by writing to support@arling.sk. You may also complain to the Slovak data protection authority (Úrad na ochranu osobných údajov SR) or the authority in your country.