Legal
Privacy policy
We sell an organizer, not data, and we never see what you put in it. Here is the complete list of what is processed, by whom and why. Last updated 28 October 2026.
Controller
Divil d.o.o., Glinškova ulica 9, 2000 Maribor, Slovenia. Contact: hello@justincasefolder.com. No data protection officer is required for a business of this size; the director answers privacy requests personally.
Your organizer answers
The answers you type into the organizer, the preview and the PDF are processed only in your browser, on your device. They are not transmitted to us or to any processor, are not stored on any server, and are not part of any analytics. If you choose “remember on this device”, your browser keeps them in its local storage until you erase them. The answers file you save is a file on your device. For these reasons we are not a controller of your answers at all; the plain-language explanation says how we check this.
What we do process, and why
- When you buy. Stripe collects your email address, your billing country and your payment details to process the payment as merchant of record and to issue the receipt. We receive from Stripe your email address, the order reference, the product, the country and the amount. Legal basis: performance of the contract and Stripe’s legal obligations. We keep order records for 10 years because Slovenian tax law requires it.
- Unlock and download links. The link we give you contains a signed reference to your order and an expiry date, nothing else. When you open an unlock link, your browser sends that reference to our server to confirm it is genuine; no answer from the organizer is sent with it. When you ask for a new link on the download page, we look up paid orders for the email you enter and send a fresh link to that address only.
- When you write to us. Mail sent to hello@justincasefolder.com is received by Resend and forwarded to a mailbox we read in Google Workspace (Gmail). We keep correspondence for as long as needed to help you and up to 2 years for warranty questions. Legal basis: performance of the contract and legitimate interest in handling support. Please never send us your folder or your answers file; we do not need them and will delete them.
- Transactional email. The order confirmation with your link is sent through Resend. No marketing email is sent unless you explicitly ask for it by writing to us; you can stop it any time by replying.
- When you browse. Our hosting provider keeps standard server logs (IP address, time, page) for security for a short period. Visits are counted by our own cookie-free beacon that records the page path, the time and a non-reversible daily identifier; it builds no profile, never sees form contents and is shared with no advertising network. Legal basis: legitimate interest in running a secure site and knowing how many people use it.
What we do not do
No tracking cookies, no advertising pixels, no social-media buttons that phone home, no account to create, no selling or renting of data, no copy of your folder anywhere.
Processors
- Stripe Payments Europe, Ltd. (Ireland) — payment, receipts, tax, refunds; acts as merchant of record and as an independent controller for the payment itself.
- Vercel Inc. (USA, EU data centres) — hosting of the site, the unlock check and file delivery.
- Resend (USA, EU sending region) — sending the order email and receiving mail to our address.
- Google LLC (Google Workspace) — the mailbox where we read your support messages.
Where a processor is outside the EU, transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Each processor is bound by a data processing agreement.
Your rights
You can ask what we hold about you (order and correspondence data only), have it corrected or deleted (except records we must keep by law), restrict or object to processing, and receive your data in a portable form. Write to hello@justincasefolder.com; we answer within a month. You may also complain to the Information Commissioner of the Republic of Slovenia (ip-rs.si) or to your local data protection authority.
Children
This site is for adults. We do not knowingly collect data from anyone under 16.
See also the terms of sale and the legal notice.