Legal

Privacy Policy

Effective 18 October 2026

This policy explains what personal data FNDR Club collects when you visit this website or buy from us, why we collect it, who we share it with and what rights you have. The shop has no user accounts, no analytics and no advertising trackers.

Who is responsible

FNDR Club is operated by Nagy Patrik, Hungary (“FNDR Club”, “we”, “us”). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything related to your privacy, write to us through our contact form.

What we collect

Browsing data. When your browser loads a page, our hosting provider receives technical information: your IP address, browser and device type, the page requested, the referring page, and the date and time. This is needed to deliver the site and protect it from abuse.
Your cart. The products you add are saved in your browser’s local storage, so your cart survives a reload. This stays on your device until you check out. Clearing your browser data removes it.
Order data. When you check out, your email address and the products in your cart are sent to our checkout service, which creates a payment with Stripe, our payment provider. Stripe collects your payment details on its own secure page. We never see or store your full card number. From Stripe we receive your email address, the name and billing country you enter, the type and last four digits of your card, the products you bought, the amount and whether the payment succeeded.
Contact form. When you send us a message, we receive your name, your email address, the topic you choose and your message.

Why we use it

Purpose Legal basis

Processing your order, delivering your files and sending your receipt Performance of a contract, Art. 6(1)(b) GDPR

Keeping invoices and accounting records Legal obligation, Art. 6(1)(c) GDPR

Running the site securely and preventing fraud Legitimate interests, Art. 6(1)(f) GDPR

Answering your messages Legitimate interests, Art. 6(1)(f) GDPR, or steps before a contract when you ask about a purchase, Art. 6(1)(b) GDPR

We don’t sell your data, use it for advertising or send you marketing emails without your consent.

Cookies and local storage

We don’t use cookies for analytics, advertising or tracking. The only thing this site stores on your device is your cart, in local storage. This is strictly necessary for the shop to work and doesn’t require consent. Stripe sets its own cookies on its payment page to process payments and prevent fraud. Those are covered by Stripe’s privacy policy.

Who we share it with

Vercel Inc. (United States) hosts the website and runs our checkout and contact form services. Vercel’s privacy policy
Stripe processes payments. For businesses in the EU, this is Stripe Payments Europe, Ltd. (Ireland). Stripe also acts as an independent controller for some purposes, such as fraud prevention and meeting its own legal obligations. Stripe’s privacy policy
Google delivers the fonts used on this site (Google Fonts). Your browser connects to Google’s servers when a page loads, which shares your IP address with Google. Google’s privacy policy
n8n, the workflow automation tool that delivers contact form messages to us.
Email delivery providers we use to send your receipt and download links.
Authorities, such as tax authorities or courts, when the law requires it.

We don’t share your data with anyone else.

International transfers

Vercel, Stripe and Google may process data in the United States. When personal data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework where the recipient is certified under it, or on the European Commission’s Standard Contractual Clauses.

How long we keep it

Server logs are kept by our hosting provider for a short period for security and troubleshooting, then deleted automatically.
Your cart stays on your device until you check out, empty it or clear your browser data.
Order and invoice records are kept for 8 years, as Hungarian accounting law requires (Section 169 of Act C of 2000 on Accounting).
Contact form messages are kept for as long as we need to handle your request and any follow-up questions.

Your rights

Under the GDPR you can ask us to:

give you a copy of your personal data (access)
correct data that is inaccurate (rectification)
delete your data, unless the law requires us to keep it (erasure)
limit how we use it (restriction)
send your data to you or another service in a portable format (portability)
stop using it where we rely on legitimate interests (objection)

Send your request through our contact form and we’ll reply within one month.

You can also complain to a data protection authority. In Hungary this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11, naih.hu. You can also contact the authority in the EU country where you live or work.

Security

The site is only served over HTTPS. Payments are handled by Stripe, which is certified as a PCI DSS Level 1 service provider, the highest level for card payments. Our checkout service never receives your card details.

Children

FNDR Club is not intended for children under 16, and we don’t knowingly collect their data.

Changes to this policy

If we change this policy, we’ll publish the new version on this page and update the effective date at the top.