Privacy Policy

Last updated: 23 September 2026

This Privacy Policy explains how we collect, use, share and protect personal data when you use elariaworld.com and the services provided through it. It applies in accordance with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

1. Who we are

The controller of your personal data is Oleksandr Shaulskyi ("we", "us", "the Seller"), UID CHE-412.589.211, registered at Rietlistrasse 11, 8172 Niederglatt ZH, Switzerland.

For any privacy question, or to exercise your rights, contact us at info@elariaworld.com.

2. Definitions

• Service — the Website and the personalised adventure we create for you.
• Website — elariaworld.com.
• You — the adult who places an order or uses the Website.
• Child's name — the first name you enter when ordering, which is spoken in the personalised video.
• Personal data — information relating to an identified or identifiable person.
• Cookies — small files stored by your browser when you visit the Website.

3. What we collect

When you place an order, we collect:

• your email address;
• the first name of the child the adventure is made for;
• the answers you give while setting up the adventure, such as the chosen theme and hiding places;
• order details: package, price, promo code, date and status;
• technical data: IP address, browser and device type, pages visited.

We do not collect payment card details. Payments are processed by Stripe, and we never see or store your full card number.

4. Why we use it and on what legal basis

• Performance of a contract — creating the personalised video and quest, delivering it to you, sending the order confirmation and the link to the adventure, answering your questions and providing support.
• Legal obligation — keeping accounting and tax records.
• Legitimate interests — keeping the Website secure and preventing abuse.
• Your consent — non-essential cookies and analytics.

We do not use your data for automated decision-making or profiling, and we do not sell it.

5. How the personalised video is created

To create the adventure, the child's first name is sent to two service providers:

• ElevenLabs — generates the character's voice speaking the child's name.
• HeyGen — generates the video in which the character appears and speaks.

Both companies are based in the United States, so the child's first name and the generated audio and video are transferred outside the European Economic Area and Switzerland. These transfers rely on the safeguards offered by those providers, including the European Commission's Standard Contractual Clauses where applicable. You can read their privacy policies at elevenlabs.io and heygen.com.

We send only the child's first name and the text of the greeting. We never send your email address, payment data or any other personal information to these providers.

6. Your personal link

After the order is complete, we send you a personal link to the adventure. The link contains a long random identifier and cannot be guessed, but anyone who receives the link can open the adventure and watch the video. Please share it only with people you trust.

7. Children's privacy

Our Service is bought by adults and used by children under adult supervision.

We do not create accounts for children and do not collect data directly from them. The only information about a child we receive is the first name you provide, and you may use a nickname instead of a real name.

If you want the child's name and the generated video removed at any time, write to info@elariaworld.com and we will delete them.

8. Who we share data with

We do not sell or rent your personal data. We share it only with the providers we need to run the Service:

• Stripe — payment processing (EU / USA)
• ElevenLabs — voice generation (USA)
• HeyGen — video generation (USA)
• Hosting provider — Infomaniak — website and database hosting (Switzerland)
• Email provider — sending order emails (Ukraine)

We may also disclose personal data where required by law, to protect our rights, to prevent fraud, or to defend legal claims.

9. How long we keep it

• Order details, email address and child's name — 24 months from the order date.
• Generated audio and video — 12 months from the order date, after which the link stops working.
• Accounting records — as required by law.
• Server logs — 3 months.

You can ask us to delete your data earlier at any time.

10. Security

We protect your data with technical and organisational measures, including encrypted connections, restricted access to the database, and unguessable order links. No system is completely secure, but we review our measures regularly.

11. Your rights

Under the GDPR and the FADP you have the right to:

• access and rectification — obtain a copy of your data and correct it;
• erasure — ask us to delete your data;
• restriction and objection — limit or object to processing;
• portability — receive your data in a machine-readable format;
• withdraw consent — where processing is based on consent.

To exercise any of these rights, contact info@elariaworld.com. We reply within 30 days.

You may also lodge a complaint with your local data protection authority or, in Switzerland, with the Federal Data Protection and Information Commissioner (FDPIC).

12. Cookies

We use essential cookies that are required for the Website to work, and, with your consent, analytics cookies that help us improve it. You can change or withdraw your choice at any time through the cookie banner, or configure your browser to refuse cookies. Refusing essential cookies may break parts of the Service.

13. Changes to this policy

We may update this Privacy Policy. The date at the top shows when it was last changed. If the changes are substantial, we will notify you by email or by a notice on the Website before they take effect.

Questions about this policy: info@elariaworld.com