Privacy

This is written to be read, not skimmed. It is short because we collect little.

What we collect

When you claim a second: the name you put on the certificate, your email, your message, the second you chose, your timezone, and which tier you bought. If it is a gift: the recipient's name and email, and your note to them. If it is printed: a shipping name and address. Payment details (card number etc.) go directly to Lemon Squeezy and never touch our servers; we receive only an order ID, the amount, and your email.

When you browse: standard server logs (IP address, browser, pages visited) kept by our hosting provider, Vercel, for up to 30 days for security and debugging. We do not run analytics trackers or advertising pixels.

Why we collect it

To create your certificate and keep it verifiable forever; to email it to you or your recipient; to ship printed certificates; to refund you if a conflict occurs; and to answer support requests. Legal basis under GDPR: performance of a contract (Art. 6(1)(b)) and, for server logs, legitimate interest in keeping the Service secure (Art. 6(1)(f)).

Who sees it

If you choose a public listing: anyone can see your name, the second, and your message on the Service. If you keep it private: nobody but you (and your gift recipient) sees your name or message; the verification page shows only that the serial number exists.

Our processors: Supabase (database, EU region), Vercel (hosting), Resend (email), Lemon Squeezy (payments), and Anthropic (automated screening of public messages only — the message text is sent, nothing else). Printed certificates are fulfilled by a print-on-demand partner who receives only the shipping name and address and the certificate image.

How long we keep it

Registry entries are kept indefinitely — that is the product. Abandoned checkouts are deleted after 7 days. Shipping addresses are deleted 90 days after dispatch. Server logs, 30 days.

Your rights

You can ask us to: make a public listing private; correct the name or message on a certificate; export everything we hold about you; or delete your personal data. Deletion removes your name, email, and message from the registry entry, leaving only the serial number and the second (so the uniqueness guarantee holds for everyone else). Email hello@claimseconds.com; we reply within 7 days. You can also complain to Datatilsynet (the Norwegian Data Protection Authority) or your local authority.

Cookies

None from us. Lemon Squeezy's checkout page sets its own; see their policy.

Who is responsible

The data controller is the sole proprietor operating Claim Seconds, registered in Norway. Contact: hello@claimseconds.com.