Privacy Policy

This Privacy Policy explains what personal data Magical Prompt Studio (“we”, “us”) collects when you visit tatianalychy.com or subscribe to the Studio, and what we do with it.

We are operated by Tatiana Allen, a UK-based sole trader. Contact: tatianalychy@gmail.com. For the data described in this policy, we act as the data controller under UK GDPR.

1. What data we collect ourselves

Our website itself collects very little:

• A sign-in cookie. When you log in through Whop, we set one small, secure cookie in your browser that just remembers which Whop account you’re signed in as, so you don’t have to log in again on every visit. It contains no card details, password, or other personal data — only an account reference, and it is encrypted/signed so it can’t be tampered with. It expires automatically after 30 days.
• A language preference. If you switch the site between English and Russian, we remember that choice in your browser’s local storage, on your device only. We don’t send it anywhere.

We use Vercel Analytics, a privacy-friendly, cookieless visit counter, to see how many people visit the site and which pages they view. It does not use cookies, does not track you across other websites, and does not collect your name, email, or any other personally identifying information — only anonymous, aggregated visit counts. We do not run any advertising trackers, and we do not maintain our own database of customer names, emails, or payment details.

2. Data collected by Whop (our payment provider)

When you subscribe, checkout is handled entirely by Whop, our payment and subscription processor. Whop collects and processes information such as your email address, name, billing address, and payment card details, in order to process payment, apply tax (VAT/sales tax) where required, and manage your subscription.

For that data, Whop acts as an independent data controller in its own right (not simply as our processor) — Whop decides how it handles payment, fraud-prevention, and tax data for its own regulatory and business purposes. We only ever see your Whop account ID and your subscription/membership status (active, trialing, cancelled) — never your card number or full billing details. For full details of what Whop collects and how it’s used, see Whop’s own Privacy Policy at whop.com.

3. What we use this data for, and our legal basis

• To let you log in and access the Studio you’ve paid for — necessary to perform our contract with you.
• To check that your subscription is active before letting you use the generators — necessary to perform our contract with you.
• To respond if you contact us for support — necessary to perform our contract with you, or based on our legitimate interest in providing customer support.

We do not sell your data, and we do not share it with anyone except Whop (to process your subscription) and, if legally required, relevant authorities.

4. How long we keep it

The sign-in cookie expires automatically after 30 days of inactivity, or immediately if you log out or clear your browser’s cookies. We don’t keep any copy of it on our own servers — it lives only in your browser.

5. Your rights

If you are in the UK or EU, under GDPR you have the right to ask what personal data is held about you, ask for it to be corrected or deleted, restrict or object to how it’s used, and (where technically possible) receive it in a portable format. Since we hold almost no personal data ourselves (it’s held by Whop as an independent controller — see Section 2), most such requests about your account, billing, or subscription should go to Whop directly. For anything relating to our own website (the cookie or language preference described above), email tatianalychy@gmail.com and we’ll help.

If you’re not satisfied with how we’ve handled your data, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, or your local data protection authority if you’re outside the UK.

6. Cookies

We use one essential cookie (described in Section 1) needed to keep you logged in — this is strictly necessary for the service to work and does not require separate consent under UK/EU cookie law. Our visit counter (Vercel Analytics, described in Section 1) does not use cookies either. We do not use any non-essential, tracking, or advertising cookies.

7. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last updated” date above.

8. Contact

Questions about this policy or your data? Email tatianalychy@gmail.com.