Privacy Policy

1. Data controller

The controller responsible for your personal data is Copstory AB (Sweden).

2. What data we process

UnityDeck is a simple storefront — you do not need an account to buy. We process only what is needed to sell and deliver a digital product:

• Order & contact data — such as your email address and order details, which we receive from our payment provider so we can deliver your product and provide support.
• Payment data — handled directly by Lemon Squeezy and its payment providers. We do not receive or store your full card details.
• Technical data — basic, non-identifying information (such as your browser type) that is standard when visiting any website.

3. Why we process it (purposes & legal basis)

• To deliver your purchase and provide customer support — performance of a contract.
• To keep records and meet accounting/tax obligations — legal obligation.
• To protect and improve the Site — legitimate interest.

4. Who we share data with (processors)

We use trusted service providers to run the Site and process payments, including:

• Lemon Squeezy — payments, checkout and order handling (Merchant of Record).
• Payment providers such as Stripe and PayPal — payment processing.
• Netlify — website hosting.

These providers process data on our behalf or as independent controllers under their own privacy policies. Some may process data outside the EU/EEA under appropriate safeguards (such as EU Standard Contractual Clauses).

Payment Processing and Lemon Squeezy

UnityDeck uses Lemon Squeezy for checkout, payment processing, order administration and delivery related services.

Lemon Squeezy acts as the Merchant of Record for purchases completed through its checkout and may process personal data including your name, email address, billing information, country, transaction information, payment information and other information necessary to process and administer your purchase.

Copstory AB does not directly receive or store your complete payment card details.

Lemon Squeezy may process personal data in the United States and other countries. Where personal data protected by the GDPR is transferred outside the European Economic Area, appropriate safeguards must be used in accordance with applicable data protection law.

For certain processing carried out on behalf of Copstory AB, Lemon Squeezy also provides a Data Processing Agreement addressing GDPR requirements and international data transfers.

5. Cookies

The UnityDeck storefront itself uses only what is necessary to function (for example remembering your chosen language). The checkout, provided by Lemon Squeezy, may set its own cookies needed to process your payment. We do not use the Site to build advertising profiles of you. For more detail, see our Cookie PolicyAffiliates.

6. How long we keep data

We keep order and accounting data for as long as required by law (Swedish bookkeeping law generally requires up to 7 years), and support correspondence only for as long as needed to help you.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise your rights, contact us at info@copstory.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se).

8. Contact

← Back to UnityDeck