Legal
Privacy Policy
Serein is an independent digital goods studio operated by Serein Studio, based in Guangdong, China. We publish AI-generated wallpapers and avatars that are reviewed by a human editor before release, and sell them as downloads and membership subscriptions.
This policy explains what we collect, why we collect it, and what we do with it. It is short because the operation is small — there is no ad network, no data broker, and no third-party analytics script on this site.
What we collect
Account. Your email address. You sign in either with a password you choose or with a one-time link sent by email. If you set a password, we store only a one-way hash of it — the password itself is never stored, and cannot be recovered or read by us.
Purchases. Order identifier, product, amount, currency, timestamp, and the licence tier you bought. Card numbers never reach us — payments are processed by Creem, our Merchant of Record.
Entitlements. Which works you have downloaded and under which licence, tied to your email. This is what lets us keep serving your downloads after a membership ends, and what we check when you request a file.
Technical data. Ordinary server logs — IP address, request path, timestamp — kept for security and troubleshooting.
Why we collect it
To create your account and keep you signed in.
To confirm payment and grant the downloads you are entitled to, including the permanent licences attached to works you bought or downloaded while a membership was active.
To provide the self-service billing portal — subscription changes, invoices, and cancellation — which Creem hosts on our behalf.
To answer support requests, prevent misuse of the free tier, and honour refunds.
To meet our legal and tax obligations. Creem, as Merchant of Record, collects and remits applicable sales tax, VAT and GST on our behalf.
Who we share it with
Creem — our Merchant of Record — processes payments, manages subscriptions and the customer portal, and handles tax. Its privacy policy is at creem.io/privacy.
Email providers — our transactional mail providers (Resend, and our own QQ mailbox as a backup relay) — process your email address for the sole purpose of delivering sign-in and password-reset messages. They act as processors on our instructions and do not use your address for anything else.
No one else. We do not sell, rent, or trade your personal information, and we do not share it with advertising or data-broker networks.
How long we keep it
Account and entitlement records are kept while your account is active and for a reasonable period afterwards, so that perpetual licences you have bought remain provable and so that refunds and disputes can be resolved.
Server logs are kept for a short period and then deleted.
Cookies
This site sets one cookie: serein_session, which is strictly necessary to keep you signed in and to remember what you have access to. It contains no payment information.
There are no advertising, analytics, or cross-site tracking cookies, and we do not embed third-party trackers.
AI-generated content
Every work published in the shop is generated with AI and then selected and checked by a human editor. We do not sell scanned photographs of real people, and we do not publish works built around third-party trademarks or copyrighted characters. Purchased works carry a licence from us only; the underlying AI-generated imagery carries no third-party rights we could grant.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, and to complain to a supervisory authority. To exercise any of these, email us at dizzytea@qq.com.
Because a purchased licence is perpetual, we may need to retain a record showing that a licence was granted to you. We will keep only what is necessary for that purpose and will delete everything else on request.
Security
Traffic is served over HTTPS. Card data is never stored on our servers — Creem handles it. Access to customer records is limited to the operator of the shop.
Children
This shop is not directed at children, and we do not knowingly collect personal data from anyone below the age of digital consent in their jurisdiction.
Changes to this policy
If we change this policy we will update the date at the bottom of this page, and notify members by email if a change materially affects them.
LAST UPDATED 2026-11-04
Questions about this document? dizzytea@qq.com