— Your data, in plain English —
Privacy Policy
Effective: 26 May 2026
The Tree Stools ("we", "us") respects your privacy. This notice explains what personal data we collect, why we collect it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
1. Who is the data controller
The Tree Stools is the controller of the personal data described in this notice. Contact: support@thetreestools.com.
2. What we collect
- Account data: your email address, password (hashed), display name, role (patron or creator), and the date you confirmed you are at least 18 years old.
- Profile data (creators): stage name, bio, genre, avatar, banner, social links.
- Payment metadata: amount, currency, pint count, status, and a Stripe checkout session identifier. We do not see or store your card number — Stripe handles that directly.
- Technical data: limited request logs (IP, user-agent, timestamps) used for security and abuse prevention.
- Cookies & local storage: see our Cookie Policy.
3. Why we use it (legal bases)
- Contract (Art. 6(1)(b)) — to create your account, run the platform, and process the pints you buy or receive.
- Legal obligation (Art. 6(1)(c)) — tax, accounting, and responding to lawful requests.
- Legitimate interests (Art. 6(1)(f)) — fraud prevention, security, and improving the service.
- Consent (Art. 6(1)(a)) — non-essential cookies; you can change consent at any time.
4. Who we share data with (processors)
- Lovable Cloud — hosting, database, authentication and storage for the platform.
- Stripe — secure payment processing. Stripe is a separate controller for the payment data they collect from you directly; see Stripe's privacy notice.
- We do not sell your personal data.
5. International transfers
Our processors may transfer data outside the EEA. Where they do, transfers are protected by Standard Contractual Clauses or equivalent safeguards approved under GDPR.
6. How long we keep it
- Account & profile data: while your account is active, plus a short period after deletion to handle disputes and meet legal obligations.
- Transaction records: kept for the period required by Irish tax and accounting law (currently 6 years).
- Request logs: a short rolling window for security purposes.
7. Your rights
Under GDPR you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- erase your data (subject to legal obligations);
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email support@thetreestools.com. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).
8. Children
The Tree Stools is not for under-18s. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
9. Changes
We may update this notice. Material changes will be highlighted on the site.