プライバシーポリシー
Last updated: 2026-02-27
1. Data Controller
CREATIF STUDIO Limited
Private Company Limited by Shares
Pod 2, The Old Station House, 15a Main Street, Blackrock, Co Dublin, A94 T8P8, Ireland
Registration number (Companies Registration Office (CRO)): 776973
Email: contact [arobase] creatif-studio [point] fr
2. Data Collected
Sports Podcasts collects the following categories of data:
| Category | Data | Required |
|---|---|---|
| Account data | Display name, email address, password (hashed) | Freenium / Premium |
| Preferences | Preferred language, favourite sports (ordered), light/dark theme, homepage preferences | No |
| Payment data | Stripe customer ID, Stripe subscription ID, start/end dates, status | Premium only |
| Navigation data | IP address (server logs), pages visited, browser, device | Automatic |
| Anti-sharing (Premium) | IP addresses accessing private RSS feed (max 7 days) | Premium only |
| Cookies | See section 8 | Variable |
Data not collected: CREATIF STUDIO does not collect or store any credit card data. All payments are processed directly by Stripe.
3. Legal Basis for Processing (GDPR Art. 6)
| Legal basis | Processing activities |
|---|---|
| Performance of contract (Art. 6(1)(b)) | Account creation and management, service delivery, Premium subscription management, content personalisation (favourites), private RSS feed |
| Legitimate interest (Art. 6(1)(f)) | Technical operation (necessary cookies, server logs), fraud prevention, unauthorised sharing detection (IP monitoring), service improvement, anonymous statistics |
| Consent (Art. 6(1)(a)) | Advertising cookies (Google AdSense), analytics cookies (Google Analytics) |
| Legal obligation (Art. 6(1)(c)) | Retention of billing data (Irish tax obligations) |
4. Purpose of Processing
- Provide and improve the sports podcast service
- Manage user accounts and subscriptions
- Personalise the experience (favourite sports, language, homepage)
- Process payments via Stripe
- Prevent fraud and unauthorised sharing of Premium accounts
- Ensure technical operation and security of the site
- Analyse usage to improve the service (anonymous statistics)
- Serve advertisements (Free and Freenium tiers)
- Comply with legal and tax obligations
5. Data Recipients and Sub-processors
| Provider | Role | Location |
|---|---|---|
| Stripe (Stripe Technology Europe, Ltd) | Payment processing | Ireland / EU (policy) |
| OpenAI (OpenAI, LLC) | Script generation (API — no user data transmitted) | United States (policy) |
| Google (Google Ireland Ltd) | Text-to-speech (Gemini TTS — no user data transmitted), Analytics, AdSense | Ireland / EU (policy) |
| O2switch | Web hosting | France / EU |
Important note: AI APIs (OpenAI, Google Gemini) are used exclusively to generate editorial content (scripts, audio). No personal user data is transmitted to these services for content generation purposes.
No personal data is sold, rented, or shared with third parties for commercial purposes.
6. International Data Transfers
Your data is primarily processed within the European Economic Area (EEA). Some technical providers (Stripe, Google) may process data in the United States. These transfers are safeguarded by:
- The EU-US Data Privacy Framework adequacy decision (European Commission decision of 10 July 2023);
- Standard Contractual Clauses (SCCs) from the European Commission, as a supplementary safeguard.
7. Data Retention
| Data | Retention period |
|---|---|
| Account data | Duration of account + 30 days after deletion |
| Payment data (Stripe ID) | 6 years after last transaction (Irish tax obligation) |
| Anti-sharing IPs (RSS feed) | 7-day rolling window |
| Server logs | Maximum 90 days |
| Preference cookies | Maximum 1 year |
| Analytics cookies | Per provider (see section 8) |
8. Cookies and Tracking Technologies
Strictly necessary cookies (no consent required):
| Cookie | Purpose | Duration |
|---|---|---|
sp_lang | Language preference | 1 year |
sp_theme | Theme preference (light/dark) | 1 year |
wordpress_logged_in_* | Logged-in user session | Session |
wordpress_sec_* | Session security | Session |
wp_sp_gating | Access counter (Free tier) | 24h |
Third-party cookies — Google Analytics (consent required):
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Google Analytics unique identifier | 2 years |
_gid | Analytics session identifier | 24h |
_gat | Request rate limiting | 1 min |
Third-party cookies — Google AdSense (consent required):
- Google and its advertising partners place cookies to serve personalised or non-personalised ads.
- You can opt out of personalised advertising via Google Ad Settings.
- See also Google's privacy policy.
Third-party cookies — Stripe (no consent required, necessary for payment):
__stripe_mid,__stripe_sid: session identification for fraud prevention during payments. These cookies are considered strictly necessary for the operation of the payment service.
A consent banner is displayed on your first visit. You can modify your preferences at any time.
9. Your Rights (GDPR)
Under the General Data Protection Regulation (EU 2016/679), you have the following rights:
- Right of access (Art. 15): obtain a copy of your personal data
- Right to rectification (Art. 16): correct inaccurate or incomplete data
- Right to erasure (Art. 17): request deletion of your data
- Right to restriction (Art. 18): restrict processing of your data
- Right to portability (Art. 20): receive your data in a structured, commonly used, machine-readable format
- Right to object (Art. 21): object to processing based on legitimate interest
- Right to withdraw consent (Art. 7): at any time for consent-based processing, without affecting the lawfulness of prior processing
- Right to lodge a complaint (Art. 77): with the supervisory authority (see section 13)
To exercise your rights: contact [arobase] creatif-studio [point] fr
We commit to responding to any request within one month. This period may be extended by two months for complex requests, in which case we will inform you.
10. Automated Decision-Making (Art. 22 GDPR)
Sports Podcasts uses automated systems in the following cases:
- AI article scoring: an automated system assigns a relevance score to sports news articles to determine which content is selected for podcast generation. This processing does not involve personal data.
- Anti-sharing detection: automated IP address monitoring of private RSS feed access to detect unauthorised sharing. If detected, the RSS feed may be automatically suspended.
These automated processes do not result in decisions producing significant legal effects concerning you within the meaning of Article 22 of the GDPR.
11. Protection of Minors
The service is intended for persons aged 16 and over. We do not knowingly collect personal data from minors under 16. If we discover that a minor under 16 has created an account, we will delete their data as soon as possible.
12. Policy Updates
This policy may be updated. Any substantial changes will be notified by email to registered users. The date of the last update is shown at the top of this page.
13. Supervisory Authority
You may file a complaint with the Data Protection Commission (DPC):
https://www.dataprotection.ie
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland