noregrats.lol
Buy skin

Fine print

Privacy policy

noregrats.lol is a product of Pieter Debaere IT Solutions BV. Version of 6 September 2026. See also the terms of service.

  1. 1.Introduction

    Pieter Debaere IT Solutions BV (the “Company”, “we”, “us”) runs noregrats.lol (the “Site”). We care about your privacy and about processing as little personal data as the Site needs. This policy explains what we collect, why, how long we keep it and what your rights are, in line with the General Data Protection Regulation (GDPR) and applicable Belgian law.

  2. 2.Controller

    Pieter Debaere IT Solutions BV, Aaltersesteenweg 21, 9800 Deinze, Belgium. Company number (KBO/VAT): BE 1009.626.775. E-mail: contact@pieterdebaere.be.

  3. 3.What we collect, and why

    We process only what a particular part of the Site needs:

    • Buying a Zone or Spot: company or brand name, website link, e-mail address, logo file, optional description, the zone or spot bought, the amount paid, and the payment metadata Stripe passes to us (payment intent and session identifiers, payment status). We never see or store card numbers. Legal basis: performance of the contract and our legal accounting obligations.
    • Publishing a body in the Body Lab: the name and link you choose, your body configuration, and your e-mail address if you give it. Legal basis: performance of the contract (publishing and letting you edit the body); the e-mail address is optional and based on your consent.
    • Visitor counter: a random identifier stored in your browser’s local storage and the times it was last seen, so we can show how many people are looking at the Site. It is not linked to your name, IP address or anything else. Legal basis: our legitimate interest in showing live activity, with no tracking involved.
    • Technical logs: our hosting provider records IP addresses and request details for a short time to keep the Site secure and running. Legal basis: legitimate interest in security and operations.
    • Aggregate statistics: we use Vercel Web Analytics to count page views and referrers. It sets no cookies and stores no identifier in your browser; visitors are counted with a short-lived hash that cannot be traced back to you. Legal basis: legitimate interest in knowing how the Site is used.
    • Contact: if you e-mail us, we keep the correspondence to answer you and to handle complaints. Legal basis: legitimate interest and, where relevant, the contract.

  4. 4.What we do not do

    We do not use tracking cookies, advertising pixels or cross-site tracking. The only things stored in your browser are the visitor identifier mentioned above and, if you use the Body Lab, your unsaved work. We do not sell or rent personal data and we do not use it for direct marketing.

  5. 5.Public information

    A Placement is public by design: the name, logo, link and description you buy a zone for are shown to every visitor, together with the amount paid for a Spot. A published body is public at its link. Your e-mail address is never shown.

  6. 6.Who receives your data

    We share personal data only with processors that are needed to run the Site, or when the law requires it:

    • Stripe Payments Europe Ltd. (Ireland): payment processing. Stripe is an independent controller for the payment itself; see Stripe’s privacy policy.
    • Supabase Inc.: database and file storage, hosted in the European Union (Frankfurt region).
    • Vercel Inc.: hosting and delivery of the Site and cookieless web analytics; may process IP addresses in server logs, including through infrastructure outside the EU under standard contractual clauses.
    • GitHub Inc.: when you use the Body Lab, your browser downloads open-source MakeHuman model files directly from GitHub, which therefore sees your IP address for those requests.

  7. 7.How long we keep it

    • Order and payment records: 7 years, as required by Belgian accounting and tax law.
    • Placements (logo, name, link, description): as long as they are displayed on the Site.
    • Published bodies: until you or we remove them.
    • Visitor counter identifiers: indefinitely, as they contain no personal data; we may purge inactive rows at any time.
    • Server logs: a few weeks at most, according to the provider’s retention.
    • E-mail correspondence: as long as needed to handle your question or complaint, and at most 3 years.

  8. 8.Security

    We take appropriate technical and organisational measures: encrypted connections, access to the database restricted to server-side keys, row-level security on all tables, and no storage of card data. No system is perfectly secure; if a breach affects you we will inform you as the GDPR requires.

  9. 9.Your rights

    You have the right to:

    • Access and rectification: ask which data we hold about you and have it corrected.
    • Erasure: ask us to delete your data where we no longer need it for legal purposes. Deleting the Content behind a Placement ends that Placement; see the terms for what that means for the payment.
    • Restriction and objection: object to processing based on our legitimate interests.
    • Portability: receive the data you gave us in a structured, machine-readable format.
    • Withdraw consent at any time where processing is based on consent, without affecting what happened before.

  10. 10.Contact

    For anything about your privacy: Pieter Debaere IT Solutions BV, Aaltersesteenweg 21, 9800 Deinze, Belgium. E-mail: contact@pieterdebaere.be. Phone: +32 498 15 85 06. We answer within one month.

  11. 11.Complaints

    If you believe we process your data unlawfully, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, www.gegevensbeschermingsautoriteit.be.

  12. 12.Changes

    We may update this policy to keep it in line with the law and with how the Site works. The current version is always at noregrats.lol/privacy. Last update: 6 September 2026.