PRIVACY

Controller: Ragole BV
Address: Beekstraat 103 - 9800 Deinze
Company / VAT number: BE0783822158
Contact: hello@mortalbutton.com

We collect only what we need to run the service:

• Email address — used to send magic-link sign-in emails and to associate your purchases with your account. Collected only if you choose to register or make a purchase.
• Country code — a two-letter country derived from your IP address at the time of a request. We do not store your full IP address. Used to show global activity and regional features.
• Anonymous identifier — a randomly generated account ID assigned on your first visit so the button can attribute presses and purchases without requiring a name.
• Activity data — your button presses, candles lit, epitaph lines, guestbook messages, inscriptions, and similar interactions. Used to operate the game and its memorials.
• Analytics — our own analytics (Umami) is cookieless and collects no personal data: page views, referrer, country, and the product events listed above.
• Hosting and monitoring — this site is hosted on Lovable's infrastructure. Their platform automatically collects, on every page:
  • performance metrics (page load timings);
  • JavaScript error reports (error message and stack trace, plus the page you were on and which generation was alive);
  • an anonymous identifier and a session identifier, stored in your browser's localStorage (not cookies);
  • session recordings (rrweb): a reconstruction of page interactions and DOM changes during your visit. These do not capture passwords, and we do not use them to identify individuals.
  This data is processed by Lovable as a sub-processor. It is collected regardless of your use of the site and cannot currently be disabled by us. Legal basis: legitimate interest in operating and debugging the service.

• Performance of a contract (Art. 6(1)(b)) — to create your account, deliver purchases, and provide the service.
• Legitimate interests (Art. 6(1)(f)) — to keep the service secure, prevent fraud and abuse, and understand aggregate usage through cookieless analytics.
• Legal obligation (Art. 6(1)(c)) — where we must retain records, for example for tax and accounting.

We share personal data with the following service providers, who process it only on our behalf:

• Supabase — database, authentication, and hosting of account and activity data.
• Paddle — our reseller and Merchant of Record for all purchases. Paddle handles payments, billing, tax, and invoicing, and receives the data needed to process your order.
• Umami — cookieless, aggregate website analytics.
• Lovable — hosting infrastructure and platform monitoring. Automatically collects performance metrics, JavaScript error reports, anonymous/session identifiers (stored in localStorage), and session recordings, as described under "What we collect and why".
• Email provider — welkom@nomeo.be domain / transactional email provider used to deliver magic-link and purchase emails.

Some providers may process data outside the EU/EEA. Where that happens, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We keep account and activity data for as long as your account exists and the memorial content you contributed remains part of the site. Purchases and their commemorative items are, by design, permanent parts of the memorial. Records we must keep for legal reasons (for example, invoices) are retained for the period required by law. When data is no longer needed, we delete or anonymise it.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data ("right to be forgotten");
• receive a copy of your data in a portable format (export);
• object to or restrict certain processing;
• lodge a complaint with your local data protection authority.

Email us at data@mortalbutton.com from the address linked to your account, or include your anonymous identifier if you never linked an email. We will verify your request and respond within one month. Note that publicly posted commemorative content (epitaphs, guestbook messages, inscriptions) may be anonymised rather than removed where it forms part of a permanent memorial, and that Paddle retains transaction records independently for legal and tax purposes.