Privacy Policy

Last updated: June 2025

Introduction

Magikal Stickers is operated by Edgy Thoughts Limited, based in the United Kingdom. This Privacy Policy explains what data we collect when you use magikal.sh, and how we handle your images and generated stickers securely and respectfully.

We only collect the minimum data needed to deliver your sticker. We never use your data for marketing unless you give explicit consent. By using the site, you accept the practices described below.

Information We Collect

To generate and optionally deliver your sticker:

• Uploaded photos (used for sticker generation)
• Generated sticker images
• Optional email address (if you choose to receive the image by email)

How We Use Your Information

We use your information strictly to:

• Generate a personalized sticker based on your photo
• Offer a download of the final sticker
• Optionally deliver the image to your email if you provide one
• Provide support if you contact us

We do not use your data for promotions or marketing.

Data Storage and Security

• Uploaded photos are sent securely to OpenAI for image generation and immediately discarded afterward.
• Final sticker images are temporarily stored on Supabase storage for delivery.
• If provided, your email is stored securely in our encrypted Supabase database.
• We store a secure login token in your browser's localStorage to maintain your session. It is never shared or reused elsewhere.

We use industry-standard practices to protect all data against unauthorized access or misuse.

Third-Party Sharing

We only share data with trusted services essential to our operation:

• OpenAI: Your uploaded image is securely sent to OpenAI to generate your sticker. We've disabled settings that would allow OpenAI to retain or train on your data. Images are deleted immediately after generation.
• Stripe: Payments are handled by Stripe. Your payment information is processed directly by Stripe and not stored by us. See the Stripe Privacy Policy.

We never sell or share your data for advertising or profiling.

Cookies

We do not use cookies or comparable trackers. A login token is stored in your local browser storage for session continuity only.

International Data Transfers

We serve a global audience. When your data crosses borders, it is protected by safeguards compliant with UK and EU GDPR standards.

Your Rights Under GDPR

If you're in the UK or EU, you have the right to:

• Access the data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to how we process it
• Request a copy in portable format
• Withdraw consent at any time
• File a complaint with a data protection authority

To exercise these rights, email us at nils@magikal.sh.

Children's Privacy

Magikal Stickers is intended for adults. We do not knowingly collect data from anyone under 16. If you believe a child has submitted personal data, contact us to have it deleted.

Changes to This Policy

We may update this policy as the service evolves. When we do, we'll revise the "last updated" date and post the new version here.

Contact Us