Privacy Policy

Last updated: 4 November 2026

This Privacy Policy applies to Emma Wolf (https://www.emmawolf.com/) and to the other websites and online tools of the Emma Wolf projects that link to it. It explains what personal data we process, why, for how long, and what rights you have. Apps and games that have their own privacy policy (for example the Happy Tree Games games) are governed by that policy.

1. Who is responsible for your data

The data controller is Imre FARKAS, a private individual (natural person) who runs the Emma Wolf projects.

• Location: Odorheiu Secuiesc, Harghita County, Romania
• E-mail: hello@emmawolf.com

We have not appointed a data protection officer, as this is not required for our activity. Please send any privacy question or request to the e-mail address above.

2. Data we process

2.1 Visiting the website

When you open a page, our web server automatically records your IP address, the date and time of the request, the requested address, the referring page and your browser identification (user agent). We use this data only to deliver the pages, keep the service secure and detect abuse. Log files are deleted automatically after about 14 days, unless a specific entry is needed to investigate a security incident.

Legal basis: our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).

2.2 Accounts and online tools

Some of our services let you create an account or sign in with an Emma Wolf ID (provided at overallid.com), and some tools store the content you enter. In that case we process the data you give us when registering and using the service (for example your name, e-mail address and the content you save), together with the technical data needed to keep you signed in and protect your account. We use this data only to provide the service you asked for. We keep it while your account exists; when you delete your account or ask us to delete it, we erase it within 30 days, except where the law requires us to keep something longer.

Legal basis: providing the service you requested (Art. 6(1)(b) GDPR).

2.3 Support requests and e-mail

If you write to us by e-mail or through the support form (provided by our own help desk at osticket.emmawolf.com), we process your name, your e-mail address, the content of your message and any information you choose to include, in order to answer you. We keep this correspondence for as long as needed to handle your request and for up to 3 years after it is closed, in case of follow-up questions or legal claims; after that it is deleted.

Legal basis: answering your request (Art. 6(1)(b) GDPR, or our legitimate interest under Art. 6(1)(f) GDPR where no contract is involved).

2.4 Donations and payments

Donations and payments are processed by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) as an independent controller. We do not receive your card or bank details. PayPal notifies us of the payment, including the name, e-mail address and amount you used. We keep payment records as long as accounting and tax law requires.

Legal basis: performing the transaction (Art. 6(1)(b) GDPR) and our legal obligations (Art. 6(1)(c) GDPR).

2.5 Cookies and third-party content

We use only the cookies described in our Cookies Policy. To display the pages, your browser may also load:

• fonts from Google Fonts (Google Ireland Limited), which receives your IP address;
• the image of the PayPal donation button from PayPal, which receives your IP address;
• JavaScript libraries (such as jQuery) from Google Hosted Libraries (ajax.googleapis.com, www.gstatic.com) and from cdnjs (Cloudflare, Inc.), which receive your IP address;
• a QR code image (to continue on another device) from qrcode.xoo.tools and a sign-in script from overallid.com; both are our own services, operated by the same controller.

Community comments (Disqus)

The community page shows a comment section provided by Disqus, Inc. (United States). When you open that page, your browser loads Disqus, which receives your IP address and information about your browser and device and may set its own cookies, including for analytics and advertising. If you post a comment, you do so with a Disqus or social account, and your comment and profile name are public. Disqus processes this data as an independent controller and may transfer it to the United States; see the Disqus Privacy Policy. The other pages of the website do not load Disqus.

3. Who receives data

• OVHcloud, which hosts our servers in the European Union, as our processor;
• Google (Google Fonts, Google Hosted Libraries);
• Cloudflare (cdnjs, which delivers some JavaScript libraries of the website);
• Disqus, only when you open the community page;
• PayPal, only if you make a donation or a payment;
• public authorities, only where we are legally obliged to disclose data.

We do not sell personal data and we do not use it for advertising.

4. Transfers outside the European Union

Google, Cloudflare and PayPal may process data in the United States and other countries. These transfers are based on the EU–U.S. Data Privacy Framework, where the company is certified, and on the European Commission's Standard Contractual Clauses. Disqus describes the safeguards for its transfers in its own privacy policy.

5. How long data is kept

• Web server logs: about 14 days.
• Account data and saved content: while your account exists, and up to 30 days after its deletion.
• Support correspondence: up to 3 years after the request is closed.
• Payment records: as long as accounting and tax law requires.
• Cookies: as listed in the Cookies Policy.

6. Children

Our websites and online tools are intended for adults. Children under 16 may create an account or send us personal data only with the consent of a parent or guardian. If you believe that a child has given us personal data without such consent, please contact us and we will delete it.

7. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict the processing of your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting earlier processing.

To exercise these rights, write to hello@emmawolf.com. We answer within one month, free of charge. To protect your data, we may ask you to confirm your identity. We do not make decisions about you based solely on automated processing.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, www.dataprotection.ro, anspdcp@dataprotection.ro.

8. Security

Our websites are served over encrypted connections (HTTPS), access to our servers is restricted, and we keep the amount of data we process to the minimum described in this policy.

9. Changes to this policy

We update this policy when our services or the law change. The current version is always available on this page, with the date of the last update at the top.

See also our Terms of Use and Cookies Policy.