Privacy policy

Last updated 15 October 2026

Who is responsible

Access to Crystalia is sold by Фізична особа - підприємець Суржікова Аделіна В'ячеславівна (FOP Surzhikova Adelina Vyacheslavivna), tax number 3453005546 (the Contractor). The service belongs to the Contractor, and it is the Contractor who collects, stores and processes the records listed below. In this policy, “we” means the Contractor.

Questions about your data, and requests to see, correct or delete it, or to withdraw your consent, go to support@crystalia.online.

What we collect, and why

Your email address
Taken at checkout and kept against your licence. WayForPay sends the receipt to it, and it is how we find your order when you write to us. Your access key is shown on screen as soon as the payment goes through, and notices about a renewal that failed or a price that is changing appear in the application; each of these may also be emailed to this address.
Your name and phone number
Required by WayForPay for the payment and passed to them with it. They are deliberately not stored here — there is no column for either in our database.
Your card details
Never reach us. The card number, expiry and security code are entered in WayForPay's own payment window, and nothing about the card is sent to our servers or stored by us.
Images you upload
Written to a temporary file while the pattern is generated and deleted as soon as it finishes. Anything a failed or abandoned job leaves behind is removed within 24 hours. We do not keep your images, the patterns made from them or the PDFs you export, and we do not use any of it to train anything.
Your licence record
Your access key, when it expires, what you have bought, what has been charged and refunded, and how many exports you have used. This is what the service runs on and what our accounts are made of.

Cookies

One cookie, and it is the session: a signed value carrying the identifier of the licence you signed in with, and nothing else. It lasts 14 days unless you sign out sooner.

There is no analytics, no advertising and no third-party tracking on this site. Your browser also keeps a few preferences of its own — the theme, the interface language, an unfinished project — which stay in your browser and are never sent to us.

Who else sees it

  • WayForPay — the payment provider. They receive your name, phone number, email address and the amount, they take the card details directly, and they issue the receipt on the Contractor's behalf. What they do with it is governed by their own terms.
  • Google Fonts — the two typefaces this site uses are loaded from fonts.googleapis.com, so Google receives the request for them and the IP address that made it. Nothing about your account or your patterns goes with it.
  • Our mail provider, for the messages described above.

We do not sell your data, and we do not share it with anyone else unless the law requires it.

How long it is kept

  • Uploaded images and the jobs that used them: no more than 24 hours.
  • The session cookie: 14 days.
  • Your licence and its orders, charges and refunds: for as long as the licence exists, and after that for as long as we are required to keep the accounting records of a sale.
  • What the Contractor receives about your payments: for as long as the offer agreement runs, and after it ends for the statutory limitation period for claims, unless the law requires otherwise.

Where it is processed

The service is provided from Ukraine. What we hold is stored on servers rented from a Ukrainian hosting provider; the servers themselves are located outside Ukraine. Payments are processed by WayForPay, and the font request described above reaches Google's servers.

Your rights

You can ask what we hold about you, ask us to correct it, and ask us to delete it. Write to support@crystalia.online and we will answer. Deleting the email address on a licence is always possible; deleting the record of a payment is not, because we are required to keep it.

You can also withdraw your consent to the processing of your data at the same address. Withdrawing it does not make processing that already took place unlawful.

Security

The site is served over HTTPS, so what passes between your browser and us is encrypted in transit. Card details never reach our servers at all. Your session is a signed cookie, so it cannot be edited to become someone else's.

Changes

If this policy changes, the date at the top changes with it. A change that affects how your data is used will be told to you rather than left here to be discovered.