Legal
Privacy Policy
How the MevaSearch Theme Marketplace handles account, submission, and technical data.
1. Data Controller
The administrator of personal data for the MevaSearch Theme Marketplace is Igor Oprządek, Bągart 14A, Poland.
Contact: privacy@weborbiton.com
No Data Protection Officer has been appointed.
2. Nature of the Service
The Marketplace is a free, community-driven platform for browsing and submitting MevaSearch themes. It is separate from the paid MevaSearch search service and does not require an active MevaSearch subscription to browse or apply themes.
Creating a Marketplace account is only required to submit a theme, favorite themes, or manage your submissions.
3. Data We Process
Account data
If you create an account: an e-mail address, a display/author name, and a password (stored in hashed form).
Submission data
Theme files and metadata you submit, including theme name, description, color values, and the author name you choose to display publicly.
Technical data
IP address, date and time of requests, browser and device type — collected for security, abuse prevention, and diagnostic purposes only.
Usage data
Aggregate, non-identifying download and popularity counts per theme, used to power sorting (e.g. "Most popular").
4. Purposes and Legal Basis (GDPR)
- Operating your account and enabling theme submission — Art. 6(1)(b) GDPR
- Reviewing submitted themes before publishing — Art. 6(1)(b) GDPR
- Ensuring the security and technical operation of the Service — Art. 6(1)(f) GDPR
- Displaying author attribution and download counts on published themes — Art. 6(1)(f) GDPR (legitimate interest in community recognition and abuse prevention)
5. Data Recipients
The Marketplace is hosted by Hostinger, with infrastructure located within the European Economic Area (EEA). Static assets may be served through a global Content Delivery Network (CDN); no personal account data or submission content is stored at CDN edge nodes outside the EEA.
We do not sell, share, or transfer your personal data to any third party for advertising or profiling purposes.
7. Retention Period
- Technical logs: up to 30 days
- Account data: for the duration you maintain an account
- Published theme submissions: retained while publicly listed, or as needed for record-keeping if removed
8. Your Rights
You have the right to access, rectify, and delete your personal data, restrict or object to processing, and request data portability. You may also lodge a complaint with a supervisory authority (PUODO – Polish Personal Data Protection Office).
To exercise these rights, contact privacy@weborbiton.com.
9. Data Transfers Outside the EEA
Account and submission data are hosted within the EEA. Static technical assets (scripts, stylesheets, fonts) may be cached and served from CDN edge nodes located outside the EEA, including the United States; no personal data is stored or processed at these nodes.
10. Minors
The Marketplace does not knowingly collect personal data from children under the age of 16 without verified parental consent, in accordance with Art. 8 GDPR and applicable Polish law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via e-mail to registered account holders where applicable.