The short version
- The website is a static page. It sets no cookies, uses no local storage, and has no analytics, ads, tracking pixels, forms or accounts. Fonts are hosted by us and the page makes no third-party requests.
- Our host, Cloudflare, sees your IP address and request details so it can deliver the site and block abuse.
- If you email us, we get your email address and message so we can reply.
- Nothing is sold, and nothing is shared for advertising.
- The JollyProof app is not released yet. Section 3 sets out the commitments we are making for it, and we will update this policy with full details before launch.
1. Who we are
This policy covers the website at jollyproof.offensa.com. JollyProof is operated by Andrei Tigaieriu, an individual trading as Offensa, based in Iași, Romania. Offensa is the "controller" of the personal information described here under the EU and UK General Data Protection Regulation (GDPR and UK GDPR) and the Swiss Federal Act on Data Protection (FADP), and the "business" under the California Consumer Privacy Act as amended (CCPA/CPRA).
For privacy questions and everything else, contact hello@offensa.com.
2. This website: what we process
Request data (through Cloudflare)
The site is a static page served by Cloudflare, which provides our hosting and content delivery network. To deliver the site and block abuse, Cloudflare processes your IP address and request details (such as the page requested, browser type and time). Cloudflare acts as our processor. We do not use this data to profile you.
Legal basis (EEA, UK, Switzerland): our legitimate interests in delivering a secure, working website (GDPR Art. 6(1)(f)).
If you email us
If you write to hello@offensa.com, we receive your email address and the content of your message, and we use them to reply and to handle any request you make. Legal basis: our legitimate interests in answering you and, where relevant, our legal obligations when handling rights requests.
What the site does not do
The site has no forms, accounts, cookies, local storage, analytics, advertising or tracking pixels, and loads nothing from third parties. We do not sell personal information and do not share it for advertising.
3. The JollyProof app (coming soon)
Not available yet
The JollyProof app is not available yet, and it does not process anyone's data today. This policy will be updated with full details before the app launches. What follows are commitments for the app, not a description of current processing.
For the app, we commit that:
- It is for parents and guardians (18+), not for children.
- It asks for a photo of a room, never a photo of a child.
- About the child, it collects only a first name, an age range, a "how good this year" choice, wishlist picks and the chosen reveal moment. No surnames, birthdays, locations or child photos.
- Room photos and generated images and videos are used only to make the family's Santa visit, are kept for a limited time, and are deleted on request.
- There are no ads and we will not sell data.
- Payments will go through Apple (and Google, if an Android version ships). We will not see card details.
- The AI providers that generate images and videos will be named in this policy before launch.
6. International transfers
Cloudflare operates globally, so request data may be processed outside your country, including outside the EEA, UK and Switzerland. Where applicable, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents) or the EU-US Data Privacy Framework where the recipient is certified.
7. How long we keep it
- Cloudflare request logs: kept for the period set by Cloudflare's standard retention.
- Emails: kept as long as needed to reply and resolve your request, and as the law requires.
8. Children
The website and the app are not directed to children, and we do not knowingly collect personal information from children (including under the US Children's Online Privacy Protection Act, COPPA). Parents and guardians provide the limited information about their child described in section 3. If you believe a child has given us personal information, or you want information about your child deleted, email hello@offensa.com and we will delete it.
9. Your rights: EEA, UK and Switzerland
Under the GDPR, UK GDPR and FADP you have the right to access your personal data, have it corrected or erased, restrict or object to processing based on our legitimate interests, receive a copy in a portable format, and withdraw consent where we rely on it. You also have the right to complain to a supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro). You may also complain to the authority in your own country of residence, work or where an issue arose, such as the UK Information Commissioner's Office or the Swiss FDPIC.
10. Your rights: United States
Depending on your state (including California under the CCPA/CPRA), you may have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its sale or sharing; and not to be discriminated against for using these rights. We do not sell personal information or share it for cross-context behavioral advertising. Where your state allows, you may use an authorized agent, and you may appeal a refusal by emailing us.
11. How to use your rights, and complaints
Email hello@offensa.com with your request. We may ask you to confirm your identity before acting. We reply within one month (GDPR) and within 45 days where US state law applies; if we need more time we will tell you why. Requests are free unless they are clearly unfounded or excessive. We would like the chance to fix a problem first, but you can contact a supervisory authority at any time (see sections 9 and 10).
12. Changes
We will update this page when our practices change, and always before the app launches. The effective date at the top shows the latest version. If a change is material, we will say so on the site.
13. Contact
Andrei Tigaieriu, trading as Offensa, Iași, Romania. Email: hello@offensa.com. See also our Terms.
This page is maintained by the operator of JollyProof (Andrei Tigaieriu, trading as Offensa). Effective 3 November 2026.