Who I am
This site is run by Paper Code Adrianna Blaszczynska, a sole trader registered in Poland, NIP 8992854518, based in Wrocław. The registered address is available on request. I am the data controller for everything described here. Contact: spots@papercode.pl.
If you buy a spot
- Your email address, so I can ask for your logo, send you the mockup to approve, and send you the photograph when the sticker goes on.
- Your brand name, logo file and website, because those are what get printed and published. They are the product.
- Your company name, address and VAT number, if you enter them at checkout. Stripe collects these and puts them on your invoice.
- A payment reference from Stripe, so the payment can be matched to a spot and refunded if needed.
Card numbers are entered on Stripe's own page and never reach this site. I never see them.
There is no account to create and no password. Paying is what identifies your spot.
If you join the waiting list
The waiting list form is handled by Formspree, who are based in the United States, so your email address goes to them and then to me. I keep your email address and the date you joined. Nothing else. It is used for one thing: telling you when spots reopen. It is never sold, never shared, and never used for anything else. Ask me and it is deleted.
What is public
Once your sponsorship is approved, your brand name, logo, website link and the price of the spot appear on this page. That is the whole point of buying one.
Your email address is never published and never shared with other sponsors. Sponsorships awaiting approval are not shown to anyone but me.
Cookies and counting
This site sets no cookies of its own, stores nothing on your device, and runs no advertising.
There is one exception, and it is Instagram. Two of my reels are embedded near the bottom of the shop page, and they load from Instagram when the page loads. That means Meta receives your IP address and can set their own cookies in their player, exactly as if you had opened the reel on Instagram itself. I do not control what they do with that and I get nothing back from it beyond the video playing. If you would rather not, blocking third-party cookies or an ad blocker stops it, and the rest of the page works normally without them.
One thing to be straight about: links out to a sponsor carry a tag saying the visit came from myspotstore.com, and which of the three places on the page you clicked. That tag is in the address, so the sponsor can tell their traffic came from here rather than from nowhere. It says where the click came from, not who made it — there is no identifier for you in it, and it is the same tag for everybody.
Two things are counted, and this is exactly what they are.
- Vercel Analytics measures traffic without cookies. It derives a short lived identifier from your request, which resets every day and cannot be linked to you or to any other website.
- Supabase runs the live numbers on the page. "Online now" is an open connection, counted while the page is open and gone the moment you close the tab. "Page views" is a running total of page loads. It is deliberately not called visitors, because reloading counts again.
- Clicks through to a sponsor are counted, per spot. Click a sponsor's logo or link and a counter for that one spot goes up by one. That counter is the whole record: a spot number and a total. Nothing is stored about who clicked, when, or where from, and there is no way to work backwards from the number to a person. The totals are public, shown next to each sponsor, because the sponsor is paying for the placement and deserves to see it.
The spots and money figures come from what has actually been sold, so there is nothing to measure about you there at all.
Who processes your data
- Stripe takes payments, issues invoices and handles refunds, and holds the card details this site never sees.
- Vercel hosts the site, keeps standard server logs, and provides the cookieless traffic measurement described above.
- Supabase runs the live numbers at the top of the page.
- Formspree receives waiting list sign-ups and forwards them to me by email. They are based in the United States.
- Meta, through the two embedded Instagram reels on the shop page, as described above.
- My email provider carries the emails between us.
I do not sell your data and I do not use it for anything beyond running this project.
How long I keep it
Records of a sponsorship are kept for as long as the sticker is on the laptop, because they are the record of who bought what.
Waiting list emails are kept until you ask me to remove them, or until the list is no longer in use.
Records of money, including payments, refunds and invoices, are kept for as long as Polish accounting law requires. That obligation is not mine to waive, so I cannot delete those on request.
Your rights
You can ask for a copy of your data, ask me to correct it, or ask me to delete it. Email spots@papercode.pl and I will deal with it within a month.
If you are not satisfied with how I handle it, you can complain to a data protection authority. Mine is the Polish one, UODO. You can also complain to the authority in the country you live in.
Changes
If this policy changes in a way that affects you, I will email everyone holding a spot. The date at the top always shows the current version.