Last updated: 9 September 2026

This Privacy Policy explains how THRINV Publishing OÜ (“THRINV”, “we”) collects and uses your personal data when you use the THRINV websites (thrinv.com and its language editions) and the account at account.thrinv.com. We are the data controller: registry code 17528410, Ahtri 12, 15551 Tallinn, Estonia. You can reach us at [email protected].

1. What we collect

Email address — when you subscribe to a newsletter, become a member, or sign in. Signing in is done with a link or one-time code sent to your address.
Name — only if you choose to give it.
Payment data — handled by our processor, Stripe. We receive confirmation and identifiers (such as a customer and subscription ID, your country, and the brand and last digits of your card as Stripe reports them), but never your full card number.
School data — for school plans, the administrator’s email and the number of seats.
Order data — for an order of printed books or of the magazine: your name, delivery address, telephone number and email address, and for a trade order the name of your organisation and its VAT or registration number, together with the contents of the order and its tracking information.
Usage data — privacy-friendly analytics (see Cookies) and standard server logs, such as IP address and browser type, kept for security and troubleshooting.

2. Why we use it, and our legal basis

To provide your account and membership and to take payment — performance of a contract.
To send the newsletter you asked for, and transactional emails such as sign-in codes and receipts — consent (newsletter) and contract.
To keep the Service secure and working and to understand aggregate usage — our legitimate interests.
To meet legal and accounting obligations — legal obligation.

3. Cookies and analytics

We keep cookies to a minimum:

thrinv_session — an essential cookie that keeps you signed in across the THRINV language editions (set on .thrinv.com). Membership sign-in cannot work without it. It is not used for advertising or tracking.
thrinv_news_meter — an essential cookie for THRINV members (not THRINV News members) that counts the three news articles you have opened this month, so the meter works without our servers storing anything about your reading. It holds only the month and the paths of those articles, expires at the end of the month, and is not used for advertising or tracking.
Analytics — we use Umami, a privacy-friendly tool that does not set tracking cookies and does not build advertising profiles; the data is aggregated.
Stripe may set its own cookies during checkout to run the payment and prevent fraud.

We do not use advertising or third-party tracking cookies.

4. Orders and shipping

When you order a printed book or an edition of THRINV Magazine we need the data required to make and deliver the parcel, and to keep the record of the sale.

What we store — your name, delivery address, telephone number and email address; for a trade order also the name of your organisation and its VAT or registration number; and the order itself with its shipping and tracking data.
Why — to perform the contract of sale, and, for the invoice, to comply with our legal accounting obligations.
Who receives it — Stripe for the payment; Bookvault Ltd (United Kingdom), our printing partner, and its print partners in the United States, Canada and Australia, which receive your name, address and telephone number so that they can print and deliver the parcel; and the carrier that delivers it. The telephone number is passed on because carriers ask for it to arrange delivery.
How long — order and invoice data are kept for as long as accounting and tax law require; the delivery address is not used for anything else, and we do not sell it or use it for advertising.

We share data only with providers who help us run the Service, under data-processing agreements:

Stripe — payment processing.
Amazon Web Services (SES) — sending transactional email.
Our newsletter infrastructure — sending the newsletter you subscribed to.
Cloudflare — content delivery and security at the edge.
Bookvault Ltd (United Kingdom) and its print partners in the United States, Canada and Australia — printing and shipping of printed orders.
Our hosting provider — the servers on which the sites and databases run.

We do not sell your personal data.

6. International transfers

Some providers (such as Stripe, AWS, and Cloudflare) may process data outside the EU/EEA. Where they do, appropriate safeguards such as the EU Standard Contractual Clauses apply.

7. How long we keep it

We keep account and billing data for as long as you have an account, and afterwards only as long as required for legal and accounting purposes. Newsletter data is kept until you unsubscribe. Server logs are kept for a short period.

8. Your rights

Under the GDPR you can ask to access your data, and to have it corrected, deleted, restricted, or ported, and you can object to certain processing. You can unsubscribe from the newsletter at any time using the link in each email, and change your email or cancel membership from your account. To exercise your rights, email [email protected]. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to the supervisory authority where you live.

9. Children

Accounts, memberships and purchases on the Service are for adults: you must be 16 or older to create an account, take a membership or place an order. The Wonder stories are written for children aged 6 to 11, but they are written to be read with a parent, a teacher or a carer, who holds the account — the child is a reader, not a user with an account of their own. We do not knowingly collect personal data from children. A school seat is claimed with the email address the school provides, so we hold the school's address and not a private one; if you believe a child has given us personal data all the same, write to us and we will delete it.

10. Changes

We may update this Policy from time to time; the “last updated” date shows the current version.

11. Contact

THRINV Publishing OÜ, Ahtri 12, 15551 Tallinn, Estonia
Email: [email protected]

Privacy Policy