Privacy policy

Last updated: October 23, 2026 · This is a translation; the French version prevails.

To make your calendar we need some information, including very personal photos and videos. Here is exactly what we do with it.

What we collect

• When you order: your email address and payment information, handled directly by Stripe (we never see your card).
• In the form: your first name, your partner’s, your answers, your texts, photos, videos, and audio or video messages from loved ones.
• By email: your conversations with us.

Why

Only to prepare, deliver and correct your calendar, and to reply to you. Legal basis: performing your order. We never sell, rent or publish your data or photos, and we don’t use them for advertising.

Who has access

Our team, and the technical providers needed for the service, each for their part:

• Stripe (payment);
• Tally BV, Belgium (form, data stored in the European Union);
• Cloudflare, Inc., USA (hosting of the calendar and website);
• Google (email);
• [other tools used to prepare calendars].

Some of these providers are outside the European Union. Transfers are covered by the safeguards of the GDPR (European Commission standard contractual clauses or the EU–US Data Privacy Framework).

How long

• Your answers and files are removed from the form as soon as your calendar is delivered; we keep a working copy so we can correct your calendar, until January 1 following your calendar, then delete it.
• The online calendar stays available until January 1 following your calendar (January 1, 2027 for a December 2026 calendar), then it is deleted.
• Invoices are kept for 10 years, as required by French law.

Cookies and storage

The calendar saves in your browser the doors already opened and your games in progress, so you find your progress again. This stays on your device. The Spotify player in the playlist may set its own cookies when you play a song. On the sales page, advertising measurement cookies (Meta and TikTok) may be used to know which ads lead to orders. They are only set if you click “Accept” in the banner; “Decline” is just as easy, and you can change your mind at any time with the “Cookies” link at the bottom of the page. Your choice is kept for 6 months.

Your rights

You can at any time ask to access, correct, delete or port your data, or object to its processing, by writing to laventsecret@gmail.com. You can also ask for your calendar to be deleted early. If you think your rights are not respected, you can contact the French data protection authority, the CNIL (cnil.fr), or the authority of your country.

Data controller

The website publisher, Théo Nechab (EI), L’Avent Secret. Full contact details of the publisher are in section 12 “The seller” of the terms of sale.