FEED THE MODEL · PRIVACY

Privacy Policy

Effective 1 October 2026.

The machine knows as little about you as it can: no accounts, no cookies, no ad trackers. Analytics is PostHog's, without cookies.

Who is responsible

Yaroslav Kovalskyi, who runs Feed the Model: ul. Świętego Mikołaja 8/11 lok. 208, 50-125 Wrocław, Poland; contact@feedthemodel.com; +48 732 959 895. Write to contact@feedthemodel.com about anything on this page.

What we process and why

Legal bases are from GDPR art. 6(1): (b) contract, (c) legal obligation, (f) legitimate interest.

Taking snacks.

• We count VEND presses and brand-link clicks per snack. To ignore repeat clicks, each press carries a code made from your IP and browser that changes every day. The presses are deleted after three months; we keep hourly totals, never the IP.
• Usage statistics. PostHog counts pages, clicks and machine events from your browser, without cookies, and discards your IP (f, seeing what works).
• Your IP and browser details reach our host, Cloudflare, so it can deliver and secure the site (f).
• Some actions have daily limits: brand lookup, CUSTOM fit check, logo upload, snack submission. For these we store a keyed hash of your IP, not the IP itself (f, preventing abuse).

Buying or raising a slot.

• Email. You must give one to buy. We send the confirmation, your slot links, CUSTOM previews and reminders, and raise confirmations (b). A slot's owner also gets one outbid alert per slot, with a one-click stop link (f, telling you your paid slot moved). The form says so. Your email is never public.
• Form details: brand address, name, colour, logo, CUSTOM brief and product description (b). Brand details become public; your brief stays private.
• Payment. Stripe handles your card and sends its receipt. We receive the amount, your email, Stripe's payment IDs and the status.
• Consent record: email, time, IP, browser user-agent, a fingerprint of the text you agreed to and the Terms version. It proves your request in a dispute or chargeback (f) and can't be edited.
• Accounting: payment records, as tax law requires (c).

Submitting a snack. The snack, your X or Instagram link, your email and a hashed IP. The email is required, to confirm the submission and tell you the outcome (b; hashed IP: f). If published, the snack, your handle and profile link are public; your email never is.

If your profile or site is on a slot. A slot can show a public name and picture from the address a buyer entered, fetched once from that page or through Unavatar (f, showing what the slot is for). If it's yours and you didn't want it there, tell us and we'll review it.

Writing to us or reporting. We keep your message, contact details and what we did: for illegal-content reports because the Digital Services Act requires it (c), otherwise to handle the request (f).

Automated checks. A model estimates whether a CUSTOM product fits, Google Web Risk flags dangerous addresses, and filters refuse chat links and some words. None makes a final decision about you: flags go to a person, and you can write to us about a fit-check refusal.

On your device

We set no cookies. While you're on Stripe's page, sessionStorage keeps the brand form (including your email) and a logo thumbnail, so nothing is lost if you come back; it clears after payment or when you close the tab. VEND writes to your clipboard and never reads it. Both are strictly necessary for what you asked (ePrivacy Directive art. 5(3); Polish Electronic Communications Law art. 399(3)). Stripe sets its own cookies on its page.

Who receives data

• Cloudflare – hosting, database and security; all site traffic.
• Stripe – payments; your email and card details.
• Resend – our emails; your address and the email.
• PostHog – usage statistics; no cookies, IP discarded.
• OpenAI – the CUSTOM fit check; only your product description.
• Safety and lookup helpers (Google Web Risk, Unavatar, public sources) – only the brand's address or handle.
• Spacemail – our inbox; emails you send us.

Some providers are in, or reachable from, the United States. Those transfers rely on the EU–US Data Privacy Framework or the Commission's standard contractual clauses (GDPR art. 45, 46); ask us which applies.

We don't sell data or share it for ads. We disclose it only when the law, a court or an authority requires it, or to defend a legal claim. The AI you paste a snack into is not our provider: we send it nothing, and what happens in your chat stays between you and it.

What's public

Everything on a pack or its page, including in search engines: the brand name, logo, colour, address, total paid and position, and for people's snacks the text, handle and profile link. Never your email, IP or payment details.

How long we keep it

• Checkouts you didn't pay for: 30 days.
• CUSTOM fit-check descriptions: 7 days, or with the checkout or order they belong to.
• Uploaded logos never used in a paid order: 48 hours.
• Action links in our emails: only a hash, deleted 30 days after the link expires.
• Paid orders, payment records, their emails and the consent record: as long as tax law requires, and while a claim or chargeback is possible.
• Public slot details: while the slot is up, then only in archive and backup copies.
• Snack submissions: while published; otherwise only as long as needed to handle them and stop repeat abuse.
• IP hashes for limits: only as long as needed to enforce them. Raw count events: three months. Statistics are kept as totals without names.
• Messages and reports: as long as needed to handle the matter and any claim about it.
• Backups expire on their own schedule.

Your rights

You can ask for a copy of your data, or to move, correct, delete or restrict it (GDPR art. 15–20). We answer within a month and may ask you to confirm the email is yours. Some data we must keep, such as payment and consent records, while tax law or a possible legal claim requires it (art. 17(3)(b), (e)).

You can object at any time to anything based on legitimate interest, including outbid alerts and profile pictures on slots (art. 21). We then stop, unless we have compelling grounds or need the data for a legal claim.

You can complain to the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or to the authority where you live or work.

Age

You must be 18 or older to buy a slot or submit a snack. If a child sent us an email or a snack, tell us and we'll erase it.

Changes

The date at the top shows the current version. If we change what we do with data you already gave us, we'll email you where we can.