Privacy & cookies

Short version: if you register on the Heroes page, we keep only your name, your email and who you are, to set up your hero account and to contact you about Kailiniai.com. They stay on a server in the EU and are deleted automatically after 24 months. If you want them deleted, email us and it is done within 30 days. We set no tracking cookies unless you allow analytics. Embedded videos load only after you press play.

Who is responsible

MB Petereda, company code 304630889, Sauliu g. 8-27, Klaipeda, Lithuania (the data controller and service provider). Contact: [email protected].

What we collect when you register

If you sign up for free lessons, we keep your first name, your email and, only if you give it, your phone number — to email you the lessons you asked for and, if you ask, to contact you about a hero place. Registration is limited on purpose. We ask for your name, your email, who you are (the option you choose) and, if you add it, your channel or website. The purpose is one thing: a hero account on Kailiniai.com — we use the details to answer your registration and to send you what you asked for. When you send the form, our server also records your IP address and the time of sending, to protect the form from abuse (legitimate interest, GDPR Art. 6(1)(f)); after 90 days both are removed automatically, and only the month of your registration remains. The legal basis is your own request to register (GDPR Art. 6(1)(b)). We do not sell your details, and we do not use them for advertising profiles.

Your account and payments

If you create an account, we keep your name, your email, your password in hashed form only (or none, if you sign in with an email link), your plan and its status, and the stories you send us — to run your membership (GDPR Art. 6(1)(b)). No payments are taken today — paid plans are not available yet. When they open, payments will be handled by our payment provider, Stripe, which processes card details under its own privacy policy; we will receive only your name, email, plan and whether the payment succeeded. Account details are deleted 24 months after your membership ends, except billing records, which we keep as long as accounting law requires.

Where it is kept and for how long

Registration details are stored in a file on our own web server, hosted by Hetzner Online GmbH in the EU (Germany or Finland). They are not stored anywhere else and not transferred outside the EU/EEA for storage. Two companies process them for us: Hetzner (hosting, EU) and Cloudflare, Inc. (network security and delivery — your form passes through its network, which may include the United States, under the EU standard contractual clauses). Nobody else receives them, and we do not pass them on to anyone. A daily cleanup removes your IP address and exact time after 90 days and deletes the whole record after 24 months; before that, you can have it deleted on request. Server backups that may contain a copy are kept for 14 days and then overwritten. You can ask us to delete them at any time by writing to [email protected]; we delete them within 30 days and confirm by email.

Server logs

Our web server keeps standard technical logs (such as IP address and time of request) for security and troubleshooting (legitimate interest, GDPR Art. 6(1)(f)), and delete them after about 14 days.

Cookies

By default this site sets no tracking cookies. Analytics (counting visits and clicks on the experts and tools we recommend) runs only if you press “Accept” or switch it on under “Manage” in the cookie bar; you can switch it off at any time under “Cookie settings”. Details are on the Cookies page. If you follow a link to another site, that site’s own cookie rules apply.

Embedded videos

Video previews are images stored on this site. Only when you press play does your browser load the player from YouTube (youtube-nocookie.com), which may then set its own cookies and receive your IP address under Google’s privacy policy. Until you press play, nothing is loaded from YouTube.

Contact form

When you send a message through the contact form, it goes to our own server, which emails it to [email protected]. We receive your name, your email, the topic you chose, your message and the page you sent it from. We use them for one purpose: to answer you (GDPR Art. 6(1)(b) and (f)). Messages are kept for 24 months and then deleted; you can ask us to delete yours earlier at [email protected].

Members and payments

If you create a member account, we keep your name, your email, a scrambled (hashed) form of your password if you set one, the package you chose and your subscription status, so that we can sign you in, provide your membership and email you sign-in links and notices about your subscription (contract, GDPR Art. 6(1)(b)). Paid plans are not open yet. When they open, payments to MB Petereda will be processed by Stripe Payments Europe, Ltd. (Ireland) under its own privacy policy; your card details will be entered on Stripe’s pages and will never reach our server. Stripe will tell us only that a payment succeeded or failed, which package it was for and its customer and subscription references, which we will store next to your account. Member data is kept on our own server in the EU for as long as your account exists and up to twenty-four months after it is closed; payment records will be kept as long as accounting law requires. A member account sets one necessary cookie that keeps you signed in; it holds no tracking.

Newsletter

If you subscribe to our weekly newsletter, we keep your email address, your first name if you give it, where you signed up (for example the footer or a story page) and when and how you confirmed — because you asked for the letter (consent, GDPR Art. 6(1)(a)). Nothing is sent until you click the link in the confirmation email. Every letter has an unsubscribe link; after you unsubscribe we keep only a note that you did, so that we never write to that address again. We send the letters through an email delivery service that acts only on our instructions (a data processor); we will name it on this page before the first letter is sent.

Prompt generator

When you use the prompt generator, the text you type into its form is sent from our server to Google’s Gemini API (Google LLC), which writes the prompts. Under Google’s terms for users in the EEA, Switzerland and the UK, Google does not use these requests or the answers to improve its products. We keep your requests and the results in your account history so that you can see them again, and we count how many you have used to apply the daily and weekly limits (GDPR Art. 6(1)(b)). The history is kept until you delete your account, or for 12 months after you last use the generator, whichever comes first. Please do not type other people’s personal data into the generator.

Your rights

Under the GDPR you can ask for access to your data, a copy of it, its correction or deletion, or restriction of its use, and you can object. Write to [email protected]; we answer within one month. You can also complain to the State Data Protection Inspectorate of Lithuania.

Changes

We update this page before we start collecting anything new. Last updated: 9 October 2026.