Privacy policy
Last updated: 14 October 2026
Courtesy translation: the French version is the one that applies. Items in [brackets] must be completed before sales open. This text describes how the site is meant to work: review it if you change tools.
1. Data controller
SKULLBOY (Jules Fernsner, entrepreneur individuel (EI)) — 3 rue de la Vallée des Loups, 57560 Abreschviller, France — skullboy.shop@protonmail.com. For any question about your data: skullboy.shop@protonmail.com.
2. The data we process
| Why | Data | Legal basis | How long |
|---|---|---|---|
| Process and deliver your order | Name, email, phone, delivery address, offer and colourway, amount | Performance of the contract | For the order and its follow-up (guarantees, withdrawal), then accounting records kept 10 years |
| Take your payment | Payment details, entered on the Stripe page (we have no access to them) | Performance of the contract | According to Stripe and legal obligations |
| Hold pieces and prevent abuse | An irreversible fingerprint (“hash”) of your IP address, never the address itself | Legitimate interest (stopping one person from blocking the stock) | 30 days at most |
| “The next drop” waiting list (telling you about the next launch) | Email address, language, date and wording of the consent | Your consent | Until you ask for removal, and 3 years at most after our last message |
| Early access (Duo offer) | Email address from the order | Performance of the contract (early access is part of the offer) | Until you ask to be removed |
| Advertising measurement (Meta, TikTok) | Identifiers and browsing data collected by these services | Your consent | According to those services; nothing is loaded without your consent |
| Audience measurement (visits, page views, visitors online) | Pages viewed, clicks on buttons and links (the element’s name only), a random visit identifier (kept in the tab only, erased when it closes, no cookie), approximate country, device type, referring site. Your IP address is not recorded. | Legitimate interest (knowing how much the site is visited) | 13 months at most |
| Security and running the site | Technical logs from the host (IP address, device, pages requested) | Legitimate interest | According to the host |
3. Cookies and local storage
The banner asks whether you accept advertising measurement cookies (Meta, TikTok). Without your consent they are not loaded. Your choice is stored on your device (the browser’s local storage); you can change it at any time by clearing the site’s data in your browser, and the banner will come back. Audience measurement uses no cookie: it leaves nothing lasting on your device and honours your browser’s “Do Not Track” signal. The site uses no other advertising tracker.
4. Who receives your data
- Stripe — payment.
- Supabase — database for stock and orders.
- Vercel — site hosting.
- The carrier — name, address and phone number for delivery.
- Meta and TikTok — only if you accept advertising measurement cookies.
We do not sell your data. Some of these providers may process data outside the European Union; such transfers are covered by safeguards provided for by the GDPR (standard contractual clauses or an adequacy decision). [Database hosting region to be confirmed.]
5. Your rights
You can at any time ask for access to your data, its correction or erasure, object to a processing, ask for it to be restricted, or ask for portability. You can withdraw your consent (or write to us to be removed from the list). Write to skullboy.shop@protonmail.com; we reply within one month. If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority.
6. Security
Payment is made entirely on Stripe’s secure page. Access to the database is reserved to the site’s server and protected by secret keys. No password is needed to order.
7. Changes
This policy may change; the date of the last update is at the top of the page. See also the pre-order terms of sale.