Privacy

Last updated 14 November 2026

Who’s responsible

We are Split Seconds, Windjammerdijk 110, 1086 VC Amsterdam, the Netherlands (Chamber of Commerce number 42213644). We decide how your personal data is used, which makes us the “controller” under the GDPR. For anything about your data, email hello@splitseconds.shop.

Your video

The frames are taken from your video inside your browser. The video itself is never sent to us or to anyone else.

When you go to payment, the page saves your settings (moment, frames, caption, size, frame) in your browser tab, so they’re still there if you come back. They’re deleted when your order is confirmed or you close the tab. This isn’t a cookie, and it isn’t sent to us.

Your print file

When you check out, your browser makes the print file, the grid of frames with your caption, and uploads it to us. It’s stored with Cloudflare in Western Europe. We use it only to print your order, and we delete it 60 days after upload, whether or not you finished paying.

Your browser also sends a small picture of your print, so Stripe can show it next to your order on its payment page. Your order confirmation email shows it too. Stripe and the email get a private link to the picture, and we delete it with the print file.

Your print may show other people. We only use it to make the print you ordered. If you appear in a print someone else ordered and want to ask about it, email us.

Legal basis: needed to make the print you ask for (GDPR Article 6(1)(b)).

Your order

Payment happens on Stripe’s checkout page. Stripe collects your name, email address, phone number, delivery address and payment details. We receive everything except your payment details, plus the order itself: size, frame, number of frames, caption and order reference. We never see your card number.

We use this to:

• have your print made and delivered (the courier may need your phone number)
• send your order confirmation, receipt and tracking link
• answer your questions and put things right if something goes wrong

We don’t send marketing emails, and we never sell or share your data for advertising.

Legal basis: needed to carry out your order (GDPR Article 6(1)(b)). We keep order records for 7 years because Dutch tax law requires it (Article 6(1)(c)).

Running the site

Like any website, this one receives your IP address and basic browser details with every request. Cloudflare uses them to deliver the pages and protect the site, and keeps short technical logs for a few days. To stop abuse, the site counts how often each IP address uploads a print file or opens checkout; each count disappears after a minute.

We also count steps in the shop, such as page viewed, video loaded and checkout opened, together with the size and frame chosen, the video’s dimensions, the name of the website you came from and, if you came through one of our ads, which ad. These counts contain no IP address, cookie or other identifier, so they can’t be linked to you.

A link in one of our ads says which ad it is, and may carry our launch discount code. The page keeps both in your browser tab, so the code can come off at checkout without you typing it. They’re deleted when your order is confirmed or you close the tab. This isn’t a cookie. If you then order, your order records which ad you came through, so we can see which ads work. The ad platform isn’t told about your visit or your order.

The site loads nothing from other companies: its fonts and code are served from this site. Stripe’s checkout page uses its own cookies to process your payment and prevent fraud; Stripe’s privacy policy explains them.

Legal basis: our legitimate interest in keeping the shop working, safe and improving, and in knowing which of our ads work (GDPR Article 6(1)(f)).

Who else handles your data

• Stripe (Stripe Payments Europe, Ltd., Ireland) takes your payment, holds your order details, shows the picture of your print on its payment page and emails us when an order is paid. Stripe is also responsible itself for some uses, such as preventing fraud and meeting its legal duties. See Stripe’s privacy policy.
• Cloudflare (Cloudflare, Inc.) runs this website, stores print files and sends our order and shipping emails.
• Prodigi (United Kingdom), our print partner, has your order made and shipped by a lab in the EU. Prodigi and the lab receive your print file, name, delivery address and phone number.
• The courier chosen by the print lab receives your name, delivery address and phone number.
• Google (Google Workspace) handles our email: our emails with you, and the email we get about each new order.

Stripe, Cloudflare and Google are American companies. Where your data can be reached from the United States, it’s protected by the EU–US Data Privacy Framework, which all three are certified under, and by the European Commission’s standard contractual clauses in their data processing terms. Prodigi is in the United Kingdom, which the European Commission recognises as protecting personal data to the EU’s standard. Prodigi’s data processing terms also let its group companies and suppliers handle your data in other countries, including the United States and Australia. Where a country isn’t recognised in that way, those terms require a safeguard such as the standard contractual clauses.

How long we keep it

• Print files and the picture shown at payment: 60 days after upload.
• Order records: 7 years, as tax law requires.
• Emails with you: 2 years after your order.
• Technical logs: a few days.
• Abuse counts: one minute.
• Settings, and the ad and code from an ad link, saved in your browser tab: until your order is confirmed or you close the tab.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, or send you your order data in a format you can take elsewhere. You can also object to the uses based on our legitimate interest. Email hello@splitseconds.shop and we’ll answer within a month. If tax law requires us to keep something, we’ll tell you, and we’ll keep it only for that.

If you’re unhappy with how we handle your data, you can complain to the Autoriteit Persoonsgegevens (the Dutch data protection authority), or to the data protection authority in the country where you live.

You don’t have to give us your details, but we can’t make and send your print without them. We don’t make automated decisions about you.

Changes

If we change this notice, the new version goes on this page with a new date.