Privacy Policy

Last updated: 2026-05-20

Who runs this

BMW Welcome Light is an independent project operated by Soryn Gitlan. It is not affiliated with, endorsed by, or connected to BMW AG. Contact: soryngitlan@gmail.com.

What we collect

• Email address — required to sign in and to deliver receipts.
• Hashed password — bcrypt with cost 12. We never see your plain-text password.
• A Pro flag — a single boolean set when your Paddle payment completes.
• Animations you save — only if you create them via the configurator and click Save.

We do not use cookies for tracking. We do not use third-party analytics. The only cookie we set is the session cookie required to keep you logged in.

Where the data lives

Account and animation data is stored in Supabase (EU region). Payments are processed by Paddle (Paddle's privacy policy); we receive only your email and the fact that a transaction completed — never your card details.

Sharing

We do not sell, rent, or share your data with anyone. The only third party that touches your data is Paddle, which handles the payment and emails your receipt.

Deleting your account

Email soryngitlan@gmail.com from the address tied to your account. We delete the account, password hash, Pro flag, and all saved animations within seven days. Paddle retains transaction records as required by tax law (typically seven years) — that's outside our control.

Changes

If we change this policy, we'll update the "Last updated" date above. Material changes will be announced to registered users via email.