Privacy policy
Last updated: 14 October 2026
1. Data controller
KAIROS NEXUS SRL, str. 27 August 8, Ialoveni, Republic of Moldova, IDNO 1025600070685, is the controller of personal data collected through the floareavietii.md platform.
For anything relating to your data, contact contact@floareavietii.md.
We process data in accordance with Regulation (EU) 2016/679 (GDPR) and with Moldovan Law no. 133/2011 on the protection of personal data.
2. What we collect
When you buy:
- your email address, which you type before paying (to find your purchase at Gumroad and to send you the watch link and access code), and the email address Gumroad records for the sale, if it differs;
- the quality purchased, the amount, the currency and the time of payment;
- the sale identifier and the license key that Gumroad issued for your purchase.
We do not collect and have no access to your card details. These are processed solely by Gumroad and its payment partners.
When you watch:
- the moment of first playback (needed to calculate your access period);
- minimal technical operating data: IP address, device and browser type, server logs.
We do not use advertising trackers, profiling, or marketing cookies.
When you write a memory or a comment (only if you bought access):
- the text you write;
- your first name and village or town: required for comments; optional for memories, and shown only if you choose to publish with your name;
- a link to your purchase, kept internally and never shown.
Approved memories and comments are public: anyone can read and share them, with the first name and place. We never show your email address. We use the email address from your purchase only to tell you that your memory was published and, if you tick the box, that someone replied to your comment.
3. Why we process it, and on what basis
| Purpose | Legal basis |
|---|---|
| Fulfilling your purchase and granting access | performance of a contract |
| Sending the confirmation email with link and code | performance of a contract |
| Applying the access period and preventing sharing | legitimate interest |
| Platform security and technical logs | legitimate interest |
| Accounting and tax obligations | legal obligation |
| Marketing communications | separate consent, optional |
| Publishing memories and comments | consent, given when you send the text |
| The email when someone replies to you | consent (the ticked box), optional |
We will never send you commercial communications without your explicit, separate consent, given by ticking a distinct box. You can withdraw it at any time with a single click.
4. Cookies
We use one strictly necessary cookie, fv_token, which maintains your access to
the film on the current device. It does not require consent, because without it
you could not view what you have bought.
The trailer is hosted by YouTube and loads only after you explicitly click the play button. Until that moment, YouTube receives no information about you. Once loaded, Google's privacy policy applies.
Payment happens on gumroad.com, in a separate tab. Our pages load no Gumroad script, so Gumroad receives nothing from our site until you choose to pay. On gumroad.com, Gumroad's own cookies and privacy policy apply.
When you start a payment, your browser keeps a random purchase reference in its
local storage (fv_pending) for at most 2 hours, so that our page can open the
film as soon as the payment is confirmed. It contains no personal data and is
deleted once used. Like the cookie, it is strictly necessary for the purchase
you asked for and does not require consent.
5. Who we share data with
Gumroad, Inc. (United States) is our reseller and the Merchant of Record for all orders. Gumroad processes payment, invoicing, tax and fraud-prevention data on its own account, as an independent controller, under its privacy policy. We read the sale from Gumroad's sales list for our account, which includes your email address, the quality purchased, the amount, the time, the sale identifier and the license key. When you go to pay, we pass Gumroad only a random purchase reference, the language of the page and the email address you typed (so that Gumroad's form is filled in); when you enter a license key on our site, we send it to Gumroad to check it.
Purchases made between 1 and 13 October 2026 were processed by Paddle.com Market Ltd (United Kingdom), as Merchant of Record and independent controller, under its privacy policy.
Other providers process data on our behalf, strictly for the service described:
| Provider | What for | Where |
|---|---|---|
| Vultr (The Constant Company, LLC) | the platform's server and database | USA |
| Bunny.net (BunnyWay d.o.o.) | video hosting and delivery | Slovenia (EU) |
| Resend | sending emails: purchase confirmation, published memory, replies | USA |
| Proton AG | messages sent to our email addresses | Switzerland |
| Telegram (Telegram FZ-LLC) | alerting the team: for a new memory, the text, first name and place, for moderation; for a new comment, only the link | United Arab Emirates |
The United Kingdom and Switzerland are covered by European Commission adequacy decisions. For providers in the USA, transfers rely on the European Commission's standard contractual clauses or, where the provider is certified, on the EU–US Data Privacy Framework.
We pass the rights holder, OWH STUDIO SRL, only aggregated and statistical data (number of views, revenue per quality). We do not pass on email addresses or any other information that could identify you.
6. How long we keep it
- Purchase data — 5 years, under accounting and tax obligations.
- Email address — with the purchase data, 5 years, under accounting and tax obligations. After your access period ends we use it only for complaints, for the memory and reply emails you asked for and, if you consented, for marketing until you withdraw that consent.
- Technical logs — 90 days at most.
- Memories and comments — for as long as the film is on the platform, or until you ask us to delete them. On request we permanently erase the text and the name; write to contact@floareavietii.md.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time.
Write to contact@floareavietii.md. We respond within 30 days at most.
If you believe we have infringed your rights, you may complain to the National Centre for Personal Data Protection of the Republic of Moldova or, if you live in the EU, to the supervisory authority in your country.
8. Security
Transmission is encrypted using HTTPS. Playback links are signed, time-limited and restricted to the floareavietii.md domain. Access to the database is limited to strictly necessary personnel.
9. Children
The platform is not directed at people under 16 and we do not knowingly collect data about them.