Legal

Privacy Policy

Last updated: August 29, 2026

This Privacy Policy explains how UNLOCKUJ spółka z ograniczoną odpowiedzialnością, Aleja Armii Krajowej 1/3 / 222, 42-200 Częstochowa, Poland, NIP 9492285839 ("we", "our", "us"), collects, uses, and protects personal data when you use our website, lockers, dashboards, and APIs. We aim to collect only what is needed to run the Service securely and reliably.

1.Data We Collect

Depending on how you interact with the Service, we may collect:

  • Account data — your email address, and optional name and avatar.
  • Payment data — handled securely by our payment processor (Stripe). We do not store full card numbers.
  • Usage data — IP address (typically hashed or truncated), approximate country, device type, browser, language, and referrer.
  • Analytics data — pseudonymized or aggregated metrics used for performance, conversions, and abuse prevention.
  • Communication data — messages you send to support or about legal matters.

2.How and Why We Use Data

We process personal data to:

  • Provide and maintain accounts, premium access, lockers, and creator payouts;
  • Process payments, renewals, and refunds;
  • Detect and prevent fraud, abuse, and invalid traffic;
  • Comply with tax, billing, and record-keeping obligations;
  • Improve the Service and, where you consent, run analytics or communications.

3.Legal Bases (GDPR)

Where the GDPR applies, we rely on the following legal bases under Art. 6: performance of a contract (to provide accounts, premium access, and payouts); compliance with legal obligations (such as billing records); our legitimate interests (to keep the Service secure and prevent abuse); and your consent (for example, for optional analytics or cookies).

4.Payments

Payments are processed by Stripe. Stripe acts as an independent controller for payment data and applies its own safeguards. For details, see Stripe's privacy policy at stripe.com/privacy.

When we arrange a creator payout, we use CoinGate (cryptocurrency) or PayPal Payouts. We may provide the chosen provider with the recipient email address, the payout amount, the currency (USD), a purpose or reference, and a payout identifier. The provider may apply its own verification. Wallet addresses, networks, and any other data CoinGate requires are provided directly to CoinGate by the locker owner. PayPal account details needed for a PayPal payout are provided to PayPal. UNLOCKUJ does not collect or store crypto wallet addresses. We keep only the data needed for the publisher agreement, settlement, audit, and payout confirmation (for example, finance profile details, ledger entries, statement snapshots, and the provider payout identifier, link, expiry, and transaction id once recorded).

5.How We Share Data

We share personal data only where necessary to operate the Service:

  • With infrastructure and analytics providers, under appropriate data processing agreements;
  • With our payment processor, for billing, renewals, and refunds;
  • With CoinGate or PayPal, when arranging a creator payout, limited to recipient email, amount, USD currency, purpose/reference, and payout identifier;
  • With authorities, where required by law or valid legal process.

We do not sell your personal data.

6.International Transfers

Where data is transferred outside the European Economic Area, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses or equivalent mechanisms.

7.Data Retention

We keep personal data only as long as needed for the purposes described here, or as required by applicable law (for example, statutory retention periods for billing records). When data is no longer needed, we delete or anonymize it.

8.Cookies and Analytics

We use cookies and similar technologies for authentication, security, and performance, and — where applicable — for analytics. You can disable cookies in your browser settings, though some features may stop working.

9.Your Rights

Subject to applicable law, you may have the right to access your data, request correction or deletion, restrict or object to processing, request portability, and withdraw consent where processing is based on consent. To exercise any of these rights, reach us through our contact page.

10.Security

We use encryption in transit, access controls, and server-level protections to safeguard your data. No system is completely secure, so you also share responsibility for keeping your account credentials confidential.

11.Children's Privacy

The Service is not intended for individuals under 16 years of age, and we do not knowingly collect data from them. If you believe a minor has provided us data, please contact us so we can remove it.

12.Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The latest version is always available on this page.

13.Contact

For privacy questions or requests, contact us through our contact page. See also our Terms of Service.