Draft – have a lawyer review it and fill in the placeholders before going live.
Privacy policy
Convenience translation – the German version prevails.
1. Controller
Viktor Ledin – Toonmoment
Von-Humboldt-Straße 11
97688 Bad Kissingen
Email: info@toonmoment.com
2. Overview
We only process personal data as far as necessary to run this website, create your video and – if you want it – send the newsletter. We don't use tracking or advertising cookies or third-party analytics; we count visits ourselves without cookies (section 11a). Fonts are served locally.
3. Hosting and server logs
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Technically necessary data (IP address, time, page, browser) is processed to deliver the site and prevent abuse (Art. 6(1)(f) GDPR). Netlify is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply.
4. Orders and video production
For your order we process: email address, uploaded photos, names/roles of the characters, your story, generated avatars, scripts and videos, and order and payment status (Art. 6(1)(b) GDPR). For photos of other people you confirm that they have consented (Art. 6(1)(a) GDPR).
Records: as proof we store the time, IP address, browser identifier and confirmed text for each confirmation (photo consent, acceptance of terms and of the immediate start) (Art. 6(1)(c) and (f) GDPR).
Storage and deletion: photos, avatars and order data are stored with Netlify (storage region EU, Frankfurt). Photos and avatars are deleted no later than 30 days after delivery, unpaid drafts after 7 days. Invoice and payment data are kept for the statutory retention periods (up to 10 years).
5. AI service providers
To create avatars, scripts, images, motion and voices we transmit the necessary data (photos, descriptions, your story, texts) to OpenRouter, Inc. (USA), which routes requests to model providers, in particular Google (images), Anthropic (story ideas in the order process and script draft), Black Forest Labs (video) and ElevenLabs (voices), solely to create your video (Art. 6(1)(b) GDPR). Where data is transferred to the USA, this is based on the EU Commission's adequacy decision for the EU-US Data Privacy Framework if the recipient is certified, and otherwise on EU standard contractual clauses (Art. 46(2)(c) GDPR).
6. Payment
Payments are processed by Stripe Payments Europe Ltd., Dublin, Ireland (card, Apple Pay, Google Pay, Klarna, PayPal etc.); for PayPal or Klarna also by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg or Klarna Bank AB, Stockholm. We receive the payment status and the name and – where requested – billing address entered at checkout in order to issue your invoice (Art. 6(1)(b) and (c) GDPR). These providers may set their own cookies during payment. Discount and voucher codes are created at Stripe.
7. Sending emails
We send order confirmations and invoices, deliveries, acknowledgements and the newsletter via Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) as our processor. Your email address, the email content and technical delivery data are processed in the EU (Art. 6(1)(b), (c) or (a) GDPR).
8. Newsletter
When you sign up, we first send you an email with a confirmation link (double opt-in); only after confirming are you added. We store time and IP address of sign-up and confirmation and the wording of your consent as proof (Art. 6(1)(c) GDPR). Content: gift ideas, new occasions and offers, at most twice a month. As a welcome you get a single-use 10% discount code that does not depend on staying subscribed. Legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every email or by writing to info@toonmoment.com.
9. Notices of withdrawal
If you submit a notice via “Withdraw from contract”, we process your name, order number, email address, optional comment and time, IP address and browser identifier to handle the withdrawal and confirm receipt (Art. 6(1)(b) and (c) GDPR). We keep this data until the limitation periods expire (usually 3 years).
9a. Gift cards
When you buy a gift card we process your email address, the names and message on the gift card and – if you choose delivery to the recipient – their email address and the send date (Art. 6(1)(b) GDPR; for the recipient's email address Art. 6(1)(f) GDPR, our legitimate interest in delivering the gift on your behalf). Please only share the address if the person can expect it. We store gift card data until it expires and then within statutory retention periods; the recipient's email address is used solely for delivery.
10. Sharing your video as an example
Only if you expressly agree after delivery do we show your video on toonmoment.com and our social media channels (Art. 6(1)(a) GDPR). You can withdraw this at any time with effect for the future; we will then remove the video without delay. We store time, IP address and content of your permission as proof.
11. Browser storage
During ordering we keep an order number in your browser's session storage so you can continue after reloading. It is deleted when you close the tab.
11a. Audience measurement without cookies
To understand which pages are used and where visitors come from, we count page views ourselves on our server at Netlify (Frankfurt region). Your browser transmits the visited page, the referring page and, if present, a campaign parameter in the address (e.g. utm_source); from the user agent that is sent anyway we only derive the device type (phone, tablet, computer) and from the IP address only the country. We store nothing but aggregated counts per hour and day – no IP addresses, no cookies, no device or user identifiers, no profiles. In the same way we count how often each step of the order process is viewed. Legal basis is our legitimate interest in improving our offer (Art. 6(1)(f) GDPR); the figures do not allow any conclusions about you as a person.
12. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and may withdraw consent at any time with effect for the future. Write to info@toonmoment.com. You may also lodge a complaint with a data protection supervisory authority; the competent one is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Last updated: 2026-11-01