1. Data controller
The data controller is Future Spark sp. z o.o., ul. Adama Branickiego 15, 02-972 Warszawa, KRS 0001163052, NIP 9512617843, REGON 541229784.
For privacy matters, contact us at [email protected].
2. Data we process
Depending on how you use the website, we may process:
- your TikTok username and public profile;
- your chosen contact method and the username, phone number or email address you provide;
- information about your LIVE formats, streaming frequency, three-month plan, goal and any optional message;
- the application status and internal notes needed to handle it;
- your IP address, submission time and basic technical data needed to keep the website secure;
- after analytics consent — first-party measurement data: page, source and UTM, approximate country, device type, page language, random session and visitor identifiers, events, technical application ID, marketing consent status and daily IP hash (see section 2a);
- after analytics consent — visit, click and scroll data measured by Google Analytics and Microsoft Clarity, including anonymous session replays with form field content masked;
- after marketing consent — visit and event data measured by the TikTok Pixel.
We never require your TikTok password. Do not include sensitive data or information that is unnecessary for reviewing your application.
2a. Our own visit counter
Before a consent decision, the server counts only HTML page requests in daily aggregates by page category. This counter does not store IP addresses, browser headers, UTM parameters, identifiers or individual visits. It does not create cookies or access browser storage.
Detailed first-party measurement starts only after analytics consent. It saves a random visitor identifier in localStorage and a session identifier in sessionStorage. The data is pseudonymous: it can link visits and events and associate an application with its source. The daily IP hash is not the full IP address, but does not prevent events being linked through the visitor identifier.
Form content and contact details stay in the application database. First-party measurement may contain the technical ID of a saved application to prevent duplicate counting. We do not send usernames, email addresses or phone numbers to analytics tools.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Reviewing the application, contacting you and taking steps before a possible agreement | Article 6(1)(b) GDPR |
| Handling correspondence, website security and establishing or defending legal claims | Article 6(1)(f) GDPR — the controller’s legitimate interest |
| Detailed analysis of website traffic and usage (first-party measurement, Google Analytics, Microsoft Clarity) | Article 6(1)(a) GDPR — voluntary consent |
| Measuring advertising effectiveness with the TikTok Pixel | Article 6(1)(a) GDPR — voluntary consent |
| Managing the cooperation after a creator is accepted | Article 6(1)(b) GDPR and legal obligations connected with the cooperation |
4. Recipients of data
Data is available only to authorised people and providers needed for the process: DreamHost hosting, email and SMTP providers, Telegram for application notifications, Google reCAPTCHA for bot protection and IT support providers. Google (Google Tag Manager and Google Analytics) and Microsoft (Clarity) receive measurement data only after analytics consent. TikTok receives measurement data only after marketing consent.
Each provider processes data within the scope of its role and terms. You can also find privacy information in the policies of Google, Microsoft, Telegram i TikTok.
5. Transfers outside the EEA
Some technology providers may process data outside the European Economic Area. In such cases, the transfer relies on safeguards provided by the GDPR and used by the relevant provider, such as an adequacy decision or standard contractual clauses.
6. How long we keep data
- applications that do not lead to cooperation — for the review period and then no longer than 6 months;
- correspondence — for as long as needed to handle it and up to 12 months for evidential purposes;
- data of accepted creators — for the cooperation period and then for the period required by law or limitation periods;
- cookie consent data — until you change your decision or clear browser storage.
- detailed first-party measurement (section 2a) — raw data for 90 days, then daily summaries for 400 days; aggregate HTML request counters — for 400 days.
7. Your rights
You may request access, correction, deletion, restriction and portability of your data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier processing.
You may also lodge a complaint with the President of the Polish Personal Data Protection Office. Details: uodo.gov.pl.
8. Cookies and similar technologies
A detailed description of the categories, providers and ways to change your decision is available in the Cookie Policy.
9. Changes to this document
This policy may be updated when the law, form or technologies we use change. The current version and update date are always published on this page.