Crystallab · Privacy notice · draft of 6 November 2026
Privacy notice
Who is responsible
The operator and data controller of Crystallab (crystallab.dev) is Nikita Perelygin, freelancer, RAKEZ Freelancer Permit No. 54000908, Business Center, RAKEZ, Ras Al Khaimah, United Arab Emirates. Contact: info@droneshow.gallery, WhatsApp +971 55 428 9906.
We process personal data under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, for users in the European Union, under the General Data Protection Regulation (GDPR).
What we keep, why, and for how long
| Data | Why | How long |
|---|---|---|
| Your e-mail address and account | Sign-in by e-mail link; your plan and your jobs | Until you ask us to delete the account |
| The show files you upload and the files we make from them | To compute and deliver your job | Deleted after you download them, and in any case within 48 hours of the job's end |
| The IP address a job was sent from | Only to limit how many free jobs run at once from one address | 30 days, then erased |
| Payment details | Paid plans | Held by Stripe, not by us; we keep the plan and the Stripe customer reference |
| A record of each refund, dispute or fraud warning on a payment: the Stripe event type, the payment's Stripe reference and the amount | To change the plan when a payment is refunded or disputed, and to answer questions about it | As long as the payment record above: until you ask us to delete the account |
| Job records: the show's file name and size, timings, the result's checks | To run the service, your monthly quota, support | Until you ask us to delete the account |
We do not sell personal data and do not use it for advertising.
Who processes it for us
- Hetzner — the compute server, Finland (EU).
- Supabase — database and sign-in, AWS region eu-north-1, Stockholm (EU).
- Cloudflare — the website, the API and file storage (R2, EU location).
- Stripe — payments, for paid plans.
- Resend — sends the sign-in e-mails: your e-mail address and the message, in the United States, under Resend's data processing agreement and the EU standard contractual clauses.
Each works on our instructions under its own data processing terms. Some of them may process data outside the EU or the UAE under their own safeguards (for example, standard contractual clauses).
Cookies and local storage
We use no analytics, no advertising and no tracking cookies. The only thing the site keeps in your browser is the sign-in session (Supabase, in local storage), which is needed for the site to work. That is why there is no cookie banner.
Your rights
You may ask for access to your data, its correction, its deletion, and a copy in a portable form; you may object to or ask us to restrict processing. Write to info@droneshow.gallery from the address of your account. We answer within 30 days. Deleting the account removes your profile, keys, jobs and their records; files still in storage expire within 48 hours. In the EU you may also complain to your data protection authority.
Changes
We will post changes here and, for important ones, tell you by e-mail.