Privacy Policy

Data controller. JAC Invest AS, Andøyfaret 33, 4623 Kristiansand, Norway, org. no. 997722515. Contact: support@theshit.house.

What we collect.

• The name you enter for the certificate.
• Your email address, collected by Stripe at checkout and shared with us to deliver your certificate.
• Order details: edition, amount, currency, payment and refund status, and the time you agreed to the terms.
• Your choice about the Hall of Proud Non-Owners (Gold Edition only).
• Basic delivery records: whether your certificate email was sent, and the wording and time of your consent at checkout.

We do not receive or store your card details. Payments are processed by Stripe and its service Link.

Why we use it.

• To create and deliver your certificate and answer support requests (performance of contract).
• To keep accounting records required by Norwegian law (legal obligation).
• To show your name in the Hall of Proud Non-Owners, only if you opted in (consent, which you can withdraw at any time).

What is public. Each certificate has a verification page reached through its QR code, using a random, non-guessable link. It shows the certificate number, edition, issue date and status. The name is shown there only if you consented. Your email and payment details are never shown.

Who we share it with.

• Stripe and Link: payment processing, merchant of record, and your email address at checkout.
• Lovable: hosts and runs the website (on Cloudflare’s network), provides the database (Lovable Cloud), sends the certificate email (Lovable Emails) and provides anonymous visitor statistics.
• Amazon Web Services: stores the database for Lovable Cloud, in the United States (Oregon).

Certificate PDFs are not stored; each one is generated when you open your private link.

Transfers outside the EEA. Your order data is stored in the United States. Such transfers rely on the safeguards our providers offer, such as the EU-US Data Privacy Framework or the EU Standard Contractual Clauses, as set out in their data processing terms.

How long we keep it. Order and accounting data is kept as long as Norwegian bookkeeping law requires. Hall of Proud Non-Owners listings are removed on request.

Your rights. You can ask for access, correction, deletion, restriction or a copy of your data, and you can object to processing. Email support@theshit.house. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).

Cookies and browser storage. The site sets no cookies of its own and uses no advertising trackers or analytics in its code. We do use Lovable’s built-in visitor statistics, which use no cookies, store nothing on your device, do not keep IP addresses and do not identify you. They record pages visited, the referring site, country, browser, device type, clicks and how the site performs. It stores a few small preferences in your browser: whether you turned off the snow or closed the Christmas bar (kept until you clear it), whether the music is on, and your order form draft including the name you typed (both kept only until you close the tab; the draft is cleared after payment). Stripe’s checkout page sets its own cookies. If we add advertising tools in future, we will ask for your consent first.