Privacy policy

Who is responsible?

Andreas Sundqvist, a sole trader using the name Angelbear, is responsible for Furistry’s processing of your personal data. Contact info@angelbear.se or write to Magasinsgatan 9D, 753 42 Uppsala, Sweden. See our company details.

Your Furistry account

You can download your first free sample and buy a portrait as a guest. An account lets you save portraits and create more free previews, up to three per day including your first preview. We use Supabase to handle email/password and Google sign-in. Supabase processes your account identifier, email, authentication details and security events. Google sign-in shares the profile information you approve with our authentication service. Creating an account does not subscribe you to marketing.

We use your account identifier to connect your saved portraits, preferences and purchases. Essential secure, HTTP-only cookies keep you signed in; our account session lasts up to 30 days unless you log out or it is revoked. Free portraits saved to your account are retained for 30 days; marking a favourite does not extend that period. Purchased portraits follow the delivery and retention periods below.

You can request account deletion in Account settings. This immediately closes access and signs you out. Scheduled cleanup removes eligible account details and portrait preferences; the studio completes removal from the authentication service. Active purchases, protected images and records needed for order handling are retained as described below. Minimal account identifiers and deletion status remain to prevent a closed account from being restored accidentally.

What we use and why

• Creating your portrait. Your uploaded photo, chosen style, generated portrait and technical generation information are used to provide the preview and product you request. Where these are personal data, the basis is providing the service or taking steps at your request before a purchase (GDPR Article 6(1)(b)). Please use pet photos and avoid including people or sensitive information unnecessarily.
• Internal quality review. Authorised studio staff may inspect saved generated portraits, their chosen style, quality setting and generation time to check visual quality and improve our style instructions. The review view excludes customer names, contact details, browser identifiers and order links. Where personal data are involved, we rely on our legitimate interest in identifying visual errors and improving the portrait service (GDPR Article 6(1)(f)), subject to your rights and interests. You can object by contacting us. This review does not extend image retention, create an additional stored image copy, or use your portraits to train an AI model. It does not authorise publishing your portrait or using it in advertising.
• Returning to a preview. If you ask us to email a private link, we use your email and selected portrait to provide that link for 30 days from your request. It works without an account and does not subscribe you to marketing. The email and link record are deleted by scheduled cleanup after expiry.
• Orders and delivery. We use your email, selected portrait, order identifiers, payment status, digital-delivery consent and, for prints, name, postal address and any supplied phone number to process your requested order and contact you about it. The basis is performance of the service or contract. Consent to immediate digital delivery concerns withdrawal rights; it is not consent to unrelated marketing.
• Security and costs. Guest identifiers, request information, timestamps, generation usage and network-derived identifiers prevent abuse, keep portraits private and enforce free-preview limits. Our legitimate interest is maintaining a secure, financially sustainable service (Article 6(1)(f)). Shared networks can share a preview allowance.
• Support and disputes. We use the information you send us to help with your order and resolve issues, based on performance of the service and our legitimate interest in handling complaints and defending legal claims. For real sales, records required by accounting or tax law will be processed under a legal obligation (Article 6(1)(c)). Test orders do not involve real payments.

Without a photo we cannot create a portrait; without an email we cannot send your private order link. A print needs a delivery address. No customer account is required.

Services involved

• OpenAI: a resized copy of your photo and generation instructions are sent to the image API to create the portrait. We do not store the uploaded source photo in our own image storage. OpenAI’s provider-side retention and account data controls are separate from our deletion schedule.
• OpenAI Sites and Cloudflare: website hosting, private image and order storage, background processing and request handling. Cloudflare Turnstile processes browser and network signals for bot protection. Infrastructure providers can process IP addresses even though our preview-allowance database does not store raw IP addresses.
• Stripe: the embedded checkout and payment status. Payment credentials are entered in Stripe’s payment fields; we do not store full card numbers or card security codes in our order database. Test mode must use test payment credentials.
• Resend: your recipient email and requested preview-link or order-confirmation content, including the private access link, are sent to Resend for delivery.
• Gelato: when the studio explicitly creates a print draft, the print file link and delivery details are provided to Gelato. Test drafts do not authorise printing. Production orders remain disabled.
• Email support: messages sent to info@angelbear.se are handled through one.com, our mailbox provider. Its retention arrangements are being confirmed.

Providers may act as processors and, for some purposes such as payment compliance or service security, as independent controllers. We are verifying the applicable contracts and roles for our accounts.

International processing

These services operate internationally, and processing may occur outside the EU/EEA, including in the United States. We have not established that all processing is EU-only. The applicable receiving entities, processing locations, contractual safeguards and any adequacy decisions depend on our provider accounts. Contact us for information about the arrangements applicable to your data. You can request information about the safeguards from info@angelbear.se.

How long we keep information

• Watermarked previews are stored temporarily. Enter your email on the preview page to receive a private return link valid for 30 days from your request. Expired preview files are removed by scheduled cleanup, subject to the retention periods and protections below.
• If you have not purchased a portrait or requested an emailed return link, its generated original and associated image copies become eligible for deletion 24 hours after generation. An active checkout or unresolved payment temporarily protects the image while the payment is handled. If you request an email link, the portrait is kept for the link’s 30-day validity period from your request.
• Paid digital portraits remain available for 90 days from delivery. They are then removed unless still needed for an ongoing print order or a held support case. Saved copies on your device are not affected.
• Private confirmation payloads and eligible print exports are cleaned up after their retention period, subject to active order and link protections. Cleanup runs hourly in batches, so removal is not necessarily at the exact expiry minute.
• The essential guest cookie lasts 30 days. Network-allowance records older than 48 hours are removed on the next allowance check.
• Order records, payment references, consent evidence, support correspondence and generation-budget records are separate from image files. These records do not currently have automatic time-based deletion. They are kept for order handling, accounting, support and disputes and reviewed by the studio, separately from the image-deletion schedule. Contact us to request deletion or a review.

The studio can save a private recovery copy of order records, contract documents and generated portraits. These copies are not public and do not extend customer download links. Contact us about deletion requests that should also cover studio-held copies. Deleting files from our active storage does not immediately delete provider logs, backups, previously submitted print drafts or copies you downloaded. Provider-specific retention and backup expiry are being reviewed. Active disputes and orders may require continued retention for that purpose.

Cookies and private links

The secure, HTTP-only cookie “__Host-furistry-guest” separates your portraits and orders from other guests. Turnstile and Stripe also process information necessary for their security and checkout services. With your optional advertising consent, we load Meta Pixel to measure our Meta ads. Meta receives page views, viewed portrait styles, completed free previews and server-confirmed purchases with the amount and currency actually paid, together with browser and network information. We do not send uploaded photos, contact details or private access links. Meta may set advertising cookies such as _fbp and _fbc. We store your advertising choice in this browser for up to 180 days. Rejecting or withdrawing consent through “Cookie settings” stops these events; the portrait service remains available. Meta processes information under its own privacy policy at https://www.facebook.com/privacy/policy/.

With your separate, optional website-statistics consent, we load Google Analytics 4 to understand visits, traffic sources, viewed portrait styles, completed free previews, checkout starts and verified purchases. Google receives the selected events, a transaction reference, purchase amount and currency, and browser and network information. Our event parameters exclude uploaded photos, names, contact details, form contents and private access links. We use public page paths and selected campaign labels; private URL fragments and other query parameters are excluded. Google advertising signals and ad personalisation are disabled. Analytics cookies (_ga and _ga_…) last up to 180 days. We remember your separate analytics choice for up to 180 days. Rejecting or withdrawing it through “Cookie settings” stops collection and removes Analytics cookies from this browser. The portrait service works without optional cookies. This processing is based on your consent, which you may withdraw at any time. Google may process data internationally, including outside the EU/EEA, under the applicable data-processing terms. Read how Google uses data from sites that use its services and Google’s privacy policy.

For delivery support, we record when a verified digital download starts and the number of downloads per order. Viewing the portrait preview is not counted. These records follow the order-record retention described above.

A preview email link lets anyone holding it view that one watermarked portrait and continue to checkout for 30 days. It does not unlock the full-size original or other portraits. Keep it private. Your order link is a private access link. Anyone who has it may view that order and download its digital portrait while the link is valid. Do not share it. Contact us if it needs to be revoked.

Your choices and rights

You may request access, correction, deletion, restriction or, where applicable, portability of your personal data. You may object to processing based on legitimate interests. These rights are subject to legal conditions; for example, we may need to retain information required by law or for a dispute. We may ask for proportionate information to verify that the request concerns your data.

Email info@angelbear.se. We normally respond within one month and will explain if a lawful extension is needed. You may complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY).

Portrait generation and abuse controls are automated. Furistry does not use them to make decisions producing legal or similarly significant effects about you. Print production requires studio review.

Changes to this notice

We update this page when our processing changes. Its version and date appear above. Material changes will be communicated where required. Contact us for current information about provider arrangements and retention of your records.