Privacy Policy

The short version

1. Who is responsible

FridgeSpace (myfridge.space) is operated by Mrutyunjaya Mishra, who acts as the data controller for the information described here.

Contact for any privacy question: myfridgespace@protonmail.com.

2. What we collect

We do not ask for your name, phone number, postal address, or date of birth. We do not buy data about you from anyone, and we do not build a profile of you.

3. Why we use it

We use the information above to display your position, to operate the ranking, to take and record payment, to review submissions against our content rules, to contact you about your position, to meet accounting and tax obligations, and to keep the site secure.

Where a legal basis is required, we rely on performance of a contract for everything needed to sell and display your position, legal obligation for financial records, and legitimate interests for security logging and abuse prevention.

We do not use your information for advertising, and we do not sell or rent it to anyone.

4. What becomes public

This part matters more than usual here, because the product is publication.

Published publicly: your brand name, your logo, your link, the amount you paid, your position, and your movements on the board including if you are eliminated into the drawer. This information appears on the website, in the activity feed, in notifications shown to other visitors, and physically on a refrigerator that may appear in photographs and videos.

Not published: your email address, and anything held by our payment provider.

Amounts paid are public by design, because the price of taking a position is derived from them. If you do not want a payment amount associated with your brand in public, do not buy a position.

5. Payments

Payments are processed by Kelviq. When you pay, you are taken to Kelviq's own checkout page.

We never receive, see, or store your card number, expiry date, or security code. Those go directly to Kelviq. We receive only a confirmation that a payment succeeded, the amount, and an order reference.

Kelviq handles your payment details under its own privacy policy and as an independent controller for that purpose. Please read their policy for how they treat card and billing data.

6. Who else handles it

We disclose Google Fonts specifically because it is a request your browser makes to a third party on every page load, even though we never see the result. If you would rather avoid it, a content blocker will stop it and the site will still work with fallback typefaces.

We share information with these providers only so far as they need it to do their job. We do not disclose your information to anyone else except where required by law, or to establish or defend a legal claim.

7. Where it is stored

Our database is hosted in the Asia Pacific (Sydney) region. Logo images are stored on Cloudflare's global network. Hosting and payment providers may process data in other countries, including the United States and the European Union.

If you are in a region with rules on international transfers, such as the UK or EEA, transfers are made under the safeguards those providers offer, typically standard contractual clauses.

8. Cookies and tracking

This site sets no cookies. There is no analytics, no advertising network, no social media pixel, and no cross-site tracking of any kind.

We use one item of browser storage. After you start a checkout, a single value called fs_pending is kept in your browser's session storage. It holds a reference number so the confirmation page can tell when your purchase has been applied. It contains nothing about you, it is not sent to any third party, and your browser deletes it when you close the tab.

Kelviq's checkout page is a separate site and may set its own cookies. Their policy governs that page.

9. How long we keep it

• Published information (brand, logo, link, amount, position history) stays visible while you hold a position, and remains in the public record of the board afterwards, including in the eliminated list and in photographs already taken.
• Payment and order records are kept for as long as tax and accounting law requires, typically several years.
• Server logs are kept for a short period by our hosting provider, generally around 30 days.
• Logo files remain in storage after removal from the fridge unless you ask us to delete them.

10. Your rights

Depending on where you live, you may have the right to ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. You may also complain to your local data protection authority.

To exercise any of these, email myfridgespace@protonmail.com. We will respond within 30 days and will not charge you for it.

Two honest limits:

• We cannot un-publish something that was public. We can remove your logo and link from the site, but past photographs, archived copies, and third-party caches are outside our control.
• We cannot delete payment records we are legally required to keep.

11. Children

This site is not intended for anyone under 18 and we do not knowingly collect information from children. If you believe a child has provided us with information, email us and we will delete it.

12. Security

The site is served over HTTPS. Payment credentials never reach our systems. Database credentials are held as server-side environment variables and are not exposed to the browser. Payment confirmations are verified with a cryptographic signature before any change is made to the board.

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify you and the relevant authority where the law requires it.

13. Changes

If we change this policy, the date at the top changes. If a change materially affects how we handle information already collected, we will say so on the website.

14. Contact