Privacy notice
Updated 15 October 2026.
Controller
TumpuLumpu OÜ. Registry number: 17403883. Address: Lõime tn 7-3, Tallinn, 10314, Estonia. For privacy questions and to exercise your rights, email virgohaan@gmail.com.
Data and purposes
The service processes email, drawing, optional description, package, order status and payment confirmation. Necessary order processing relies on the contract or steps requested before entering it; accounting retention relies on legal obligations. Please do not include a child’s full name, contact details or unnecessary personal information.
Providers
The website uses Sites hosting with Cloudflare D1/R2 for order and file storage. We use Higgsfield for animation production, Montonio as a separate controller for payer data during payment processing and Zone for order and delivery email. Providers may process data outside the European Economic Area. Contact us for further information about processing and applicable safeguards.
Retention
The private video link lasts seven days from the completed-film email. We delete drawing and video files in application R2 storage 14 days after that same email. This internal cleanup deadline does not guarantee extended downloads or recovery. Application file access closes at the deadline; scheduled maintenance removes R2 files. Production copies in Higgsfield and local working files may remain longer; this does not guarantee later retention or recovery for customers. Higgsfield states that removed content may remain on active systems for another 30 days and in backups longer; we do not promise permanent deletion of those copies on day 14. Accounting, payment and necessary order records are retained separately according to applicable obligations. We retain incomplete and cancelled order data only to the extent and for the period needed to resolve the order, payment or refund, handle legal claims or fulfil statutory obligations. Unneeded materials are removed when that need ends.
Your rights
You may request access, rectification and, where applicable, erasure, restriction, portability or object to processing. Consent may be withdrawn without affecting earlier lawful processing. You may lodge a complaint with the Estonian Data Protection Inspectorate.
Delivery checks
For order delivery and customer support we record the first opening of the private video page, first playback and first click on the download button against your order. We add no tracking cookies and store no separate IP address or browser identifier for these events. They do not prove the viewer’s identity or that the file was fully saved. These timestamps are removed within 90 days of the completed-film email.
Gallery and cookies
Gallery and advertising use requires separate voluntary permission and is not a condition of ordering. No analytics or advertising tracking has been added. Playing a sample connects to an external media server and shares technical connection data, including your IP address.