Privacy Policy

Last updated: October 2026.

1. Who we are

The data controller is Chirali Bahar, registered at Strada Gualdo Centro 6, 05035 Narni (TR), Italy, VAT number IT01759710559. For any privacy request you can write to contact@playbarti.com.

2. What Barti is and who it is for

Barti is an online shop of printable creative missions (PDFs) for children aged 6 to 12. The website is for adults — parents, teachers and educators — who buy or download the materials. There are no accounts, profiles or areas for children, and we do not collect any data about children: the child only uses the printed sheet and, if they like, listens to the character's voice through the QR code.

3. What we collect

When you buy: the email address you enter on the payment page, the products bought, the amount, the date, the language and the payment reference provided by Stripe. We also record when you confirmed that you want to download the PDFs straight away (see the Terms and Conditions). We never see or store your card details: payment happens entirely on Stripe's secure page.

When you ask for a free PDF or a notification: your email address, language, what you asked for (for example the free booklet, or a notice when a mission is ready), whether you also chose to receive our creative ideas by email, and the dates you confirmed or unsubscribed.

When you write to us: your address and your message.

Technical data: the minimum needed to run and secure the website: the browsing session (which holds, for example, your basket), server logs and the payment events Stripe sends us.

4. Why we process data, and on what legal basis

Selling and delivering the PDFs (payment, the email with your download link, the download page) — performance of a contract.
Keeping records of sales — legal tax and accounting obligations.
Sending you the free PDF or notification you asked for — your consent, confirmed by clicking the link we send you (double opt-in).
Sending you our creative ideas by email — only if you ticked the optional box; you can unsubscribe at any time with the link in every email.
Measurement and marketing on the website — your consent, given through the cookie banner and withdrawable at any time (section 5).
Security, abuse prevention and technical logs — our legitimate interest in keeping the website safe and working.

5. Cookies, measurement and marketing

Strictly necessary cookies (session and basket, security, language, and the record of your cookie choice) are always on. Everything else is optional and does not load until you allow it from the banner: measurement (Microsoft Clarity, Google Analytics via Google Tag Manager) and marketing (Meta Pixel). You can change your mind at any time using the "Cookie settings" link in the footer. The full detail is in the Cookie Policy.

The listening pages opened by the QR code printed on the sheets — often in a classroom or by a child — never use any measurement or marketing tool, whatever was chosen on the banner, and are kept out of search engines.

Counting visits without cookies. Whatever you choose, we count visits to the public pages on our own server: the date, the page, the language, whether the device is a phone or a computer, and the name of the site you arrived from. Nothing is written to your device, nothing is sent to anyone else, and your IP address is not kept: it is used, together with the browser, only to compute a one-way code with a random value that changes every day, so that two visitors can be told apart within a day without anyone being identified and without one day being linked to the next. Legal basis: our legitimate interest in knowing how many people visit the site. The aggregate figures are kept for 14 months.

6. Who we share data with

We do not sell personal data. We use the following providers, acting as processors:

Stripe — payments. Receives what you enter on its payment page (email, card details) and the transaction details.
Our email provider — sending emails (download links, confirmations, notifications). Receives your address and the message.
Our hosting provider — servers and storage. Paid PDFs are kept in an area of the server the web cannot reach and are delivered only through your personal download link.
Microsoft (Clarity) and Google (Tag Manager, Analytics) — measurement, only with your consent.
Meta — advertising pixel, only with your consent.

Data may be disclosed to competent authorities where the law requires it.

7. International transfers

Some providers may process data outside the European Economic Area or the United Kingdom. Where that happens, transfers rely on Standard Contractual Clauses approved by the European Commission (or the UK equivalent) or another appropriate safeguard.

8. How long we keep data

Orders and payment records: for the period required by tax and accounting law (10 years in Italy). Your download link stays active for 30 days after purchase.
Addresses for free PDFs, notifications and emailed ideas: until you unsubscribe. If you never confirm your address, we do not write to you again.
Browsing sessions: 30 days.
Payment events received from Stripe: 12 months.
Administrative action log: 5 years.

9. Your rights

You can request access to your data, rectification, erasure or restriction of processing, data portability, and object to certain processing; you may also withdraw any consent at any time without affecting the lawfulness of earlier processing. To stop our emails, use the link in any of them; for anything else write to contact@playbarti.com. Data we must keep by law (for example sales records) is kept until that period ends.

You have the right to lodge a complaint with the Information Commissioner's Office (United Kingdom) or the Garante per la protezione dei dati personali (Italy).

10. Security

We apply appropriate technical and organisational measures: encrypted traffic (HTTPS), paid PDFs kept outside the public area of the server and delivered only through a personal, unguessable link, an admin panel restricted to authorised staff and protected by two-factor authentication, logging of administrative actions, and protected backups.

11. Changes

If we make material changes to this policy, we will publish them on this page with the date of the update.