Privacy Policy

OSTARA.WORK respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation, GDPR, and applicable French legislation.

This carefully detailed Privacy Policy explains how personal data may be processed when you visit this website or purchase products or services through the OSTARA.WORK online store.

Data Controller

OSTARA.WORK

Micro-entreprise established in France.

Electronic Mail: [email protected]

Website Operation

The main OSTARA.WORK website is a static website. Thus, it does not require user registration and does not intentionally collect personal information through forms, advertising technologies, behavioural tracking, or analytics services.

Hosting and Technical Processing

This website is delivered through Cloudflare Pages

As part of providing secure and reliable hosting, Cloudflare may temporarily process technical information such as IP addresses, browser information, request metadata and security logs. Such processing is performed to deliver the website, maintain service availability, detect malicious activity and protect against abuse.

OSTARA.WORK does not use this information for advertising, profiling, behavioural analysis or commercial surveillance.

XSS Lab

Certain educational webpages, such as xss-lab.pages.dev, may read values supplied in the page URL (for example, query parameters or URL fragments) solely within the visitor's browser for the purpose of demonstrating web security concepts. These values are not transmitted to OSTARA.WORK servers and are not stored or processed by OSTARA.WORK

Online Store

Digital products, memberships and other commercial services are displayed in the OSTARA.WORK online store powered by Payhip

When you visit the store or purchase a product, personal data necessary to process your order may be collected and processed by Payhip and its payment providers. This may include your name, email address, billing details, payment information, purchase history and other information required to complete the transaction.

OSTARA.WORK receives only the information necessary to process customer orders, provide customer support and comply with accounting, taxation and other legal obligations.

Payment card information is processed directly by the relevant payment providers and is not stored by OSTARA.WORK

Legal Basis for Processing

• Performance of a contract, including processing purchases and delivering products or services.
• Compliance with legal obligations, including accounting and taxation requirements.
• Legitimate interests, including maintaining the security and integrity of the website.

Cookies

The main OSTARA.WORK website does not use cookies for advertising, behavioural profiling or visitor analytics.

Certain cookies may nevertheless be used where technically necessary for website operation, security or when accessing third-party services such as the online store or payment providers.

Data Sharing

OSTARA.WORK does not sell, rent or trade any form of personal data.

Personal data may be processed by trusted service providers acting on behalf of OSTARA.WORK where necessary to provide website hosting, eCommerce services, payment processing or other legally required functions by the laws of France.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes and enforce contractual rights.

Your Rights

Subject to applicable law, you have the right to:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request deletion of your personal data where applicable.
• Request restriction of processing.
• Object to certain processing activities.
• Request data portability where applicable.

You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés, CNIL

Third-Party Services

This website may contain links to third-party websites or services. OSTARA.WORK is not responsible for the privacy practices of external websites. Visitors should consult the privacy policies of those services before providing personal information.

Changes to this Policy

This Privacy Policy may be updated from time to time to reflect legal, technical or operational changes. The latest version published on this website shall apply.

Privacy Policy updated on 27 July 2026.