Draft. This text does not apply yet. It will be published once the company is registered and the terms are decided.
Your photos and details
We use your photos only to make your piece. The photos are deleted 30 days after delivery. No one may train AI on them, and we never show them without your yes.
Who is responsible
[Company name], [address], is responsible for your personal data. Write to hej@chessfaces.com if you have questions.
What we keep and for how long
| What | Why | How long |
|---|---|---|
| The photos you take or upload | To make your piece and check that it looks like the person in the photos. | 30 days after delivery |
| The face, the shape we make your piece from | So we can make a new piece if it breaks or comes out wrong. | 3 years after delivery |
| Name, email, phone and address | To deliver and to answer questions and complaints. | 3 years after delivery |
| The payment and the receipt | Swedish bookkeeping law requires it. | 7 years |
| What you write to us | To follow up on your question. | 1 year |
| Visits to the site: the page, which link you came from, phone or computer, and which film you saw | To see which channels and which home page work. | 13 months |
| Email on the waiting list, and which link you came from | To email you when pre-orders open. | Until you unsubscribe, at the latest 31 January 2027 |
| An order that is never paid | So you can continue later. | Photos, name and address are deleted after 30 days |
If you ask us to delete something sooner, we do, except what bookkeeping law requires us to keep.
Why we may use them
- We need the photos, the face and your address to make and deliver what you bought.
- If the photos show someone other than the person ordering, we use them so the person ordering can give a piece as a gift. The person ordering confirms that they have permission. If the person is under 18, a parent or guardian must have given permission.
- We keep the face and your contact details after delivery because we are responsible for faults in the piece for 3 years.
- We keep the receipt because the law requires it.
- We count visits to know what works on the site.
- We email the waiting list only because you asked us to. Every email has a link to unsubscribe.
Under the General Data Protection Regulation: performance of a contract (Article 6(1)(b)), legitimate interest (Article 6(1)(f)), legal obligation (Article 6(1)(c)) and, for the waiting list, consent (Article 6(1)(a)).
The photos and the face
- We use the photos only for your piece. We do not use them to recognise or identify anyone.
- The camera on the site measures how the head is turned. This is calculated on your phone or computer, and the measurements never leave your device.
- The photos are stored encrypted in private storage in Stockholm. Only we in the workshop can open them.
- We never send your photos by email or chat.
- We never show your piece or your photos, for example in advertising, without a written yes from you and from the person in the photos.
- None of our suppliers may train AI on the photos.
If someone else ordered your piece
If someone has ordered a piece with your face, you have the same rights as the person who ordered it. Write to hej@chessfaces.com and we will delete the photos. If the piece has not been made yet, we will cancel it.
Who helps us
| Supplier | What they do | Where the data is |
|---|---|---|
| Supabase | Stores orders, photos, visit statistics and the waiting list | Stockholm |
| Vercel | Runs the website | Stockholm. The company is in the USA. |
| Stripe | Takes payments | EU. May be transferred to the USA. |
| Resend | Sends our emails | USA |
| [The service that builds the face] | Builds the face from the photos | [country] |
| Anthropic | Checks the face and answers in the chat | USA |
They may use the data only to help us, under agreements with us. When data is transferred to the USA it is protected by the EU’s rules for such transfers: the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. PostNord receives your name and address to deliver the parcel, and Klarna receives your details if you pay with Klarna. They are responsible for how they use them.
Cookies
- We do not use cookies for statistics or advertising, and no pixels from, for example, Meta or TikTok. That is why we do not ask about cookies.
- We count visits without cookies. The server makes a code from your IP address and browser together with a secret key. The code changes every day, so we cannot recognise you from one day to the next, and the IP address is not stored.
- The home page shows one of two films, to see which works best. Which one you see is worked out the same way, and nothing is stored in your browser.
- The order you are working on is saved in your browser so that you can continue where you left off. It is only a key to the order, and it is removed once you have paid.
- At checkout, Stripe sets cookies that are needed to keep the payment secure.
- If we add cookies for statistics or advertising, we will ask you first.
Your rights
You can ask us to show, correct or delete your data, to move it, to limit how we use it, or object to how we use it. Write to hej@chessfaces.com from the address you ordered with. We reply within one month.
If you are not happy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY).
Changes
If we change anything important, we will write it here and email anyone with an order in progress. Last changed 12 October 2026.