Privacy Policy
Last updated: May 2026
FameCake, operated by Realworld Advertising Ltd, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital screen advertising platform.
By using FameCake, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our service.
Personal Information:
- Name and email address
- Billing information (processed securely through Stripe)
- Profile information (display name, profile picture)
User-Generated Content:
- Messages, images, and designs you create for screen advertisements
- AI-generated content based on your inputs
- Advertisement preferences and settings
Technical Information:
- IP address and device information
- Browser type and version
- Usage data and analytics (pages visited, time spent, interactions)
- Cookies and similar tracking technologies
Communication Data:
- Customer support inquiries and correspondence
- Feedback and survey responses
- Marketing communications preferences
We use the information we collect for the following purposes:
- Service Delivery: To process orders, display your messages on screens, manage your account, and provide customer support
- AI Features: To generate and improve AI-assisted design features based on your content and preferences
- Payment Processing: To process transactions through our payment processor, Stripe
- Communications: To send order confirmations, notifications, updates, and marketing materials (with your consent)
- Service Improvement: To analyze usage patterns, troubleshoot issues, and enhance our platform features
- Security: To detect, prevent, and address fraud, abuse, or security issues
- Legal Compliance: To comply with legal obligations and respond to lawful requests from authorities
We may share your information with:
- Media Owners: Screen operators who display your advertisements (limited to necessary display information)
- Payment Processors: Stripe processes payment information on our behalf. We do not store complete credit card details
- Service Providers: Third-party vendors who assist with hosting, analytics, customer support, and AI services (Google Cloud Platform, Firebase, Google AI, PostHog, Google Analytics, Resend)
- Legal Requirements: Law enforcement, regulatory authorities, or other parties when required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to affected users)
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
Under UK-GDPR you have the following rights:
- Access (Article 15) & Portability (Article 20): Get a JSON export of your data. Use “Export my data” in your account.
- Erasure (Article 17): Delete your account, drafts, creatives and uploads. Use “Delete account”. Records required by tax law are retained anonymized for 6 years per HMRC requirements.
- Rectification (Article 16): Correct inaccurate information from your profile page.
- Restriction (Article 18) & Objection (Article 21): Email privacy@famecake.com with your specific request.
- Withdraw consent (Article 7): at any time to revoke analytics tracking; opt out of marketing emails from your profile.
- Complain to the ICO:If you're unhappy with our response, you can complain to the UK's Information Commissioner's Office at ico.org.uk.
We aim to respond to all rights requests within 30 days as required by Article 12. Email privacy@famecake.com if you can't self-serve.
We implement appropriate technical and organizational security measures to protect your information, including:
- Encryption of data in transit and at rest
- Secure authentication through Firebase Auth
- Regular security audits and monitoring
- Access controls and employee training
- Secure cloud infrastructure (Google Cloud Platform)
However, no internet transmission or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
| Data category | Retention | Lawful basis |
|---|---|---|
| Account profile, drafts, creatives, uploads | Until you delete your account | Contract |
| Paid posts, invoices, payment records | 6 years from post end (HMRC VAT Notice 700/21) | Legal obligation |
| Support conversations | 2 years; deleted with account if not linked to a paid post | Legitimate interest |
| Email send logs (non-receipt) | Deleted with account; receipts retained anonymized for 6 years | Legitimate interest / Legal obligation |
| Analytics events & session recordings (PostHog, GA) | Up to 13 months at the provider | Consent |
| Stripe payment data | Per Stripe's retention policy (typically 7 years) | Legal obligation |
| Data-rights audit log (export & erasure requests) | Retained indefinitely as a record of compliance (email + request metadata only; no profile data) | Legal obligation / Legitimate interest |
| Server request logs (Cloud Run, Load Balancer) | 30 days, then auto-deleted | Legitimate interest (security, debugging) |
| Database point-in-time recovery snapshots | 7 days (Firestore PITR window) | Legitimate interest (disaster recovery) |
When you delete your account, we hard-delete what we can. Records required for HMRC compliance are retained in anonymized form (no name, email, or other directly identifying fields) until the retention period elapses. Database backups containing your data are overwritten within 7 days of erasure.
We comply with the Privacy and Electronic Communications Regulations (PECR) for cookies.
Necessary (always on)
| Provider | Purpose |
|---|---|
| Firebase Auth | Sign-in and session |
| Stripe | Payment fraud prevention |
| FameCake (fc_consent) | Stores your cookie preferences |
Strictly necessary for service (Recital 66 / ICO guidance)
Google Maps is loaded on screen-picker pages because the map is essential to the service you've requested. Google Fonts may be loaded for visual presentation. Neither sets directly identifying cookies but may cause IP-level disclosure to Google.
Analytics (require your consent)
| Provider | Purpose | Cookies |
|---|---|---|
| PostHog | Product analytics, session replay (passwords masked) | ph_* |
| Google Analytics | Aggregate usage analytics | _ga, _ga_*, _gid |
Marketing
Not currently used.
Regional defaults
Visitors from the EEA, UK, and Switzerland see a consent banner on first visit and analytics cookies stay off until accepted. Visitors elsewhere see no banner and analytics cookies load by default — you can still opt out at any time using the link below. We determine your region from your IP address at the network edge.
You can change your preferences at any time: .
FameCake is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we discover that we have inadvertently collected information from a child, we will delete it promptly.
If you believe we have collected information from a child, please contact us immediately at info@famecake.com.
Your information may be transferred to and processed in countries other than your country of residence, including the United States and United Kingdom, where our servers and service providers are located.
We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions where applicable.
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Updating the “Last Updated” date at the top of this policy
- Posting a notice on our platform
- Sending an email notification (for material changes)
Your continued use of FameCake after changes become effective constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: info@famecake.com
Company: Realworld Advertising Ltd
Data Protection Officer: privacy@famecake.com
For users in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.
By using FameCake, you acknowledge that you have read and understood this Privacy Policy.