Privacy Policy

Effective date: September 30, 2026

1. Who is responsible for your data

The controller of personal data on treasurein.online is Konstantinos Polymenopoulos, an individual developer and sole operator, Kastraki 5, Astros, 22001, Greece. Email: smartidioktisia@gmail.com.

2. Who this service is for

TreasureIn is for adults only. You must be 18 or older to create a key or buy tickets or credit. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created a key, write to us and we will delete it.

3. What we process

The name you enter when you create a key. A first name or nickname is enough. We do not ask for an email address, and you should not enter sensitive information.
Your key (generated for you), your credit balances and how credit is used.
Purchase records: when you buy, your account ID is passed to Stripe so the purchase can be linked to your key. We receive confirmation of the purchase and its amount.
Payment details: entered on Stripe's own checkout page. We do not see or store your card number.
Technical data: IP address and browser information, recorded in standard server logs for security and operation.
Data stored in your browser: a session token, your key and your account name, so you stay signed in. The Exit button removes them. See the Cookies page.

4. Why we process it and on what basis

To create your key, show your balance and deliver what you bought (performance of a contract).
To keep records of purchases as required by Greek tax and accounting law (legal obligation).
To keep the service secure and prevent abuse (legitimate interests).

5. Who receives data

Stripe: processes payments under its own privacy policy.
Supabase: the backend that stores accounts and credit balances.
Apps that accept a key: AI apps run by the same operator check your key and credit balance through the same account when you use them.
Hosting, Google Fonts and jsDelivr: receive your IP address when your browser loads the page, fonts or a code library.

Some of these providers are located outside the European Economic Area, so data may be transferred there. We do not sell your data and we do not use it for advertising.

6. How long we keep data

We keep account, credit and purchase records while your key is in use and as long as tax and accounting law requires. Other data is kept only as long as needed for the purposes above.

7. Cookies

We do not use advertising or tracking cookies. Stripe may set its own cookies on its checkout pages. Details are on the Cookies page.

8. Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, restriction, portability, and you can object to processing. Write to smartidioktisia@gmail.com. You also have the right to complain to the Hellenic Data Protection Authority (dpa.gr) or to the authority in your own country.

9. Changes

If we change this policy, we will update the effective date above.