Privacy notice

What this prototype stores

The order database stores the name and email you enter, amount and currency, local and PayPal order/capture references, payment and delivery status, timestamps, and your adult, terms, and immediate-delivery confirmation timestamps, terms version, exact declarations, and a copy of the terms and privacy notice. A failed or cancelled checkout may still leave an order record.

The checkout does not request a date of birth, identity document, PayPal password, or card number. The adult declaration is not independently verified.

Why data is used and who receives it

Order data is used to process the requested checkout, deliver and retry delivery of the diploma, match payment updates, handle enquiries or disputes, and record the declarations made at checkout.

• PayPal processes payment and returns payment references and status. You provide account or payment details directly to PayPal, under its own privacy and account terms.
• The configured email provider receives the destination address, diploma, and email content, including the supplied name and amount.
• The operator and the hosting provider (Hostinger) process application and database data. Server logs may include IP addresses, requested URLs, timestamps, and technical errors.

This prototype has no advertising or analytics integration and does not send order data for marketing.

The intended Danish operation uses data necessary to take steps at your request and perform the contract (checkout and diploma delivery), to meet applicable legal obligations, and for legitimate interests in security and handling disputes, where those bases apply. The legal controller identity and the final purpose-by-purpose lawful-basis assessment must be completed before live use.

The requested name, email, payment amount, and declarations are needed to process this order; without them checkout cannot proceed. Accepting purchase terms is not consent to advertising. This application does not implement profiling, credit scoring, or personalised pricing. Form and payment checks are automated; contact us if you need a human review of a problem.

Cookies

The application uses a session cookie for form protection and temporary status/error messages. It is not an advertising cookie. PayPal may use its own cookies when you visit its checkout.

Retention and your rights

There is currently no automatic deletion schedule: order records remain in the configured database until the operator removes them. A lawful retention schedule, lawful bases, processor details, and any international-transfer safeguards must be established before live use. Use test data while this remains a sandbox.

Depending on applicable law, you may have rights to access, correction, deletion, restriction, portability, objection, and complaint to a data-protection authority. Some records may need to be retained to meet legal obligations or resolve disputes.

Where processing is based on consent, you can withdraw that consent without affecting the lawfulness of processing before withdrawal. This is separate from cancelling a purchase and does not undo processing based on another valid legal ground.

You may complain to Denmark's data-protection authority, Datatilsynet, or another competent supervisory authority. Asking us for help first is not a condition for making a complaint.

For privacy requests, contact J.M. at TheNothingDiplom@hotmail.com. Do not send passwords, full card numbers, or identity documents by unsolicited email.