Privacy Policy

01Who we are

Seller / data controller: [Legal operator details pending]. Business or correspondence address: [Seller address pending manual completion]. Registration and tax details, if legally required: [Owner to confirm applicable requirements and details]. These placeholders must be completed by the owner before live sales; no registered company or tax status is asserted.

Refund, support and privacy contact: support@candliss.app. This mailbox is monitored. Seller / data controller: [Legal operator details pending].

02What this policy covers

Candliss is a digital candle-making laboratory currently under development. A reservation is a refundable $20 USD deposit included in the $90 USD total one-time product price, not an additional fee. The remaining $70 USD is payable separately when the laboratory is ready, before access, and will never be charged automatically. No subscription is required and the deposit does not provide immediate access. Expected access begins October 31, 2026; this date is an estimate and may change.

Account registration and account saving are already implemented for authorized laboratory testers. Registering an account or paying a deposit does not grant full laboratory access. This policy distinguishes those existing services from the product still in development.

03Information collected

The information involved depends on the services you use:

• Account information: email address, account identifier, authentication credentials handled by the authentication service, and session and verification information.
• Laboratory information entered by authorized testers: materials, formulas, experiment drafts, pour and curing logs, burn-test observations, investigations, plans, comparisons, notes and uploaded photos.
• Payment information: Stripe collects checkout contact details, payment method information and transaction details. The seller can access reservation email, amount, payment reference, status and refund history in Stripe payment records. Candliss does not store full card details.
• Correspondence: information you choose to send in support, refund or privacy requests.
• Technical and security information processed by hosting and service providers, such as IP address, browser and device information, request logs and authentication events needed to deliver and protect the service.

Stripe records are currently the source of truth for reservation payments. There is no automatic reservation-record synchronization or payment verification on the public confirmation page.

04Accounts and laboratory storage

Authorized signed-in testers can save laboratory records to their account. Uploaded laboratory photos are stored privately and accessed through temporary links. Session-only work is not permanent account storage; learning progress is held in memory. Account access controls restrict saved records to the authorized account. A reservation payment is not an access entitlement.

05Third-party services

Service providers process information needed for their respective services:

• Lovable hosting and Lovable Cloud: website delivery, account authentication, saved laboratory records and private photo storage.
• Authentication email delivery: signup verification and other account-security emails are sent from noreply@notify.candliss.app. This is a send-only address, separate from the support mailbox.
• Stripe: checkout, payment processing, fraud prevention, payment records and refunds. Stripe may act as an independent controller for its own compliance and payment-service purposes; its privacy policy is available at https://stripe.com/privacy. Candliss receives only the information made available to the seller for reservation administration, not full card details.

Meta Platforms: the Meta Pixel shares page visits and clicks that open the $20 reservation checkout, IP address, browser information, page/referrer URLs and advertising cookie identifiers (_fbp and, where present, _fbc) for advertising measurement and ad optimization. No form-data matching, confirmed-payment reporting or server-side Meta reporting is enabled. Pages containing authentication tokens or unrecognized URL parameters are not tracked. Meta privacy information: https://www.facebook.com/privacy/policy/.

Provider contracting entities, subprocessors, processing locations and applicable agreements: [Owner to confirm and complete]. Personal information may also be disclosed where legally required.

06Purposes and legal bases

Subject to the law that applies, processing purposes and proposed legal bases are:

• Provide accounts, authorized laboratory storage, reservations and refunds (performance of a contract or steps requested before a contract).
• Respond to support requests (contract or legitimate interests) and privacy requests (applicable legal obligations).
• Provide reservation-related readiness, delay, cancellation and final-payment information (contract); unrelated marketing requires an appropriate separate legal basis.
• Protect the website and accounts and prevent fraud (legitimate interests in service security).
• Meet applicable accounting, tax and other legal obligations (legal obligation).

Applicable legal bases and the responsible controller must be confirmed by the owner for the final policy.

07Cookies and similar technologies

Account sessions use browser storage and authentication cookies as needed to keep you signed in. Campaign parameters may be retained for the current browser session and passed to checkout. Stripe uses its own technologies on its hosted checkout.

Meta advertising tracking is blocked until acceptance in consent-required or unknown regions. Elsewhere it may operate without a banner, but an explicit refusal or browser Global Privacy Control / Do Not Track signal blocks it. Cookie settings lets you reject, accept or withdraw at any time, including in other open tabs; opening settings alone does not change your choice. Blocked events are not replayed later.

Advertising choices are stored locally under candliss-advertising-consent with a random visitor reference, timestamps, region and notice version meta-pixel-2026-10-22-v1. This notice covers Meta receiving page visits, reservation-checkout clicks, IP address, browser information and advertising cookie identifiers for measurement and ad optimization, with no form data or payment confirmation. Later withdrawal preserves earlier consent evidence. Clearing browser storage removes that local record. Meta cookies may remain after withdrawal but are not read or used for new tracking by Candliss while permission is denied. See the Cookie Policy for the full list of browser storage used.

08How long we keep information

We keep personal information only as long as needed for the purposes above. Reservation and transaction records may be retained for the period required by accounting and tax law. Support correspondence is kept as long as reasonably needed to resolve your request. Specific retention periods: [Retention schedule pending].

09Your privacy rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information, subject to legal exceptions.
• Restrict or object to certain processing.
• Receive your information in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority (for individuals in the EU, EEA or UK).

Where applicable, residents of US states may also have rights to know about processing, opt out of sale, sharing or targeted advertising, and appeal a denied request. Applicable rights and exceptions depend on local law; exercising rights will not result in unlawful discrimination.

Send privacy requests to support@candliss.app, stating the request and the account or checkout email involved. We may ask for proportionate identity verification; do not send passwords or full payment details. Requests will be handled within applicable legal time limits.

10International transfers

Providers may process information outside your country, including in the United States. Where applicable, cross-border transfers require a lawful mechanism and appropriate safeguards. Processing locations and safeguards, including how to obtain relevant information: [Owner to confirm provider arrangements and complete]. This draft does not assert that a particular transfer arrangement has been verified.

11Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure. If a breach affects your information, we will notify you and the relevant authorities where required by law.

12Children

CANDLISS is not directed to children under 16, and we do not knowingly collect their personal information.

13Changes to this policy

We will update this policy as CANDLISS develops. Material changes will be posted on this page and, where appropriate, communicated to reservation holders.

14Contact

Refund, support and privacy contact: support@candliss.app. This mailbox is monitored. Seller / data controller: [Legal operator details pending].