✅ 📖 Privacy Policy

Company: Smol Spaghettorium S.R.L., Bucharest, Romania
Website: https://spaghettorium.com
Last update: 23th July 2025

1. Who We Are
Smol Spaghettorium S.R.L. is a creative studio based in Bucharest, Romania. We create and sell art, physical goods, digital content, apps, and games via various online platforms and our website.

2. What We Collect
We may collect limited data from visitors to our website, while respecting your privacy and complying with GDPR. This can include:
• Basic, anonymized analytics to understand how visitors use the site (if we use a privacy-respecting analytics tool)
• Contact information if you voluntarily reach out to us via email or form
• Cookies or local storage for features related to browser games or embedded tools (only if essential)

We do not sell, profile, or track users across websites.
If we expand data collection (e.g., for accounts or orders), we will clearly notify users and update this policy.

3. Cookies
• spaghettorium.com does not use cookies at this time.
• Our browser games and apps may use essential cookies or local storage to function properly.
• Third-party services linked from our site may use cookies.

4. Third-Party Links
Our website links to external platforms (Etsy, Patreon, Amazon, etc.). These sites are not operated by us. We’re not responsible for their privacy practices. Please refer to their policies.

5. Children’s Privacy
This site is not directed to children under 13. Some of our games are 17+. We do not knowingly collect personal data from children.

✅ 🛡️ GDPR Compliance Notice

1. Data Controller
Smol Spaghettorium S.R.L. acts as the Data Controller for any personal data collected directly by us (e.g., email communication).

For third-party platforms (like Etsy or Patreon), those platforms are the Data Controllers.

2. Legal Basis for Processing
We process data only when necessary:
• To respond to emails or inquiries (legitimate interest)
• To maintain website functionality (via cookies in games/apps)
• For any platform-related processing, the third-party platform defines the legal basis

We do not process personal data via our website beyond these limited cases.

3. Your Rights Under GDPR
If we process your data, you have the right to:
• Access your data
• Correct inaccurate info
• Request deletion of your data
• Restrict or object to processing
• Request a copy of your data (portability)
• Withdraw consent (if consent-based)

To exercise these rights, contact us here: spaghettorium.com/contact.html

For data handled by Etsy, Patreon, or other platforms, contact them directly.

4. Data Transfers
We do not transfer personal data ourselves.
Third-party platforms may transfer data internationally under their own policies.

5. Data Security
We implement reasonable safeguards for any limited personal data we process (e.g., via email).
Browser games or apps may store data locally or send crash reports for diagnostic purposes — these are anonymized.

6. Data Retention
We retain data only as long as necessary to fulfill the purpose (e.g., reply to an email), unless legally required to keep it longer.