Last updated: April 15, 2026
Chimii ("we", "us", "our") operates this website and sells digital sticker packs. If you have any privacy-related questions, please contact us via the Contact page.
We collect the following personal data: • Email address — required to deliver your download links and send order confirmations. • Name — optionally provided when creating an account. • IP address and browser information — logged for security purposes (e.g. download fraud prevention). • Order details — pack name, price, date of purchase, payment provider reference. We do NOT collect or store your full card number, CVV, or bank details. Card payments are handled entirely by Stripe.
We use your data solely to: • Process and fulfil your order. • Deliver download links to your email. • Respond to support enquiries. • Detect and prevent fraud or abuse. • Comply with legal obligations. We do not use your data for advertising profiling.
We process your data under the following legal bases: • Contract performance — processing your order and delivering your download. • Legitimate interests — fraud prevention, security logging. • Legal obligation — tax records, compliance requirements. • Consent — if you opt in to marketing emails (you can withdraw consent at any time).
We share minimal data with the following trusted third parties as required to operate the service: • Stripe — payment processing. See Stripe's privacy policy at stripe.com/privacy. • PayPal — payment processing. See PayPal's privacy policy at paypal.com/privacy. • Hosting provider — our servers are hosted on a reputable provider with appropriate data protection agreements. We do not use third-party advertising trackers or analytics services that profile you.
We use a single session cookie to maintain your login state and shopping cart. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required for session-only cookies under most privacy regulations.
We retain order records (email, purchase history) for 7 years for tax and accounting purposes. Account data is retained until you request deletion. Download logs are retained for 90 days for fraud prevention, then deleted.
Depending on your location, you may have rights including: • Access — request a copy of the data we hold about you. • Rectification — ask us to correct inaccurate data. • Erasure — ask us to delete your data (subject to legal retention requirements). • Portability — receive your data in a machine-readable format. • Objection — object to processing based on legitimate interests. To exercise any of these rights, please contact us. We will respond within 30 days.
We implement industry-standard security measures including HTTPS encryption for all traffic, secure password hashing (bcrypt), CSRF protection on all forms, and rate-limited download tokens. No online system can be guaranteed 100% secure, but we take your data seriously and act promptly on any suspected breach.
Our service is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised date. Continued use of the Site after the update constitutes acceptance of the new policy.