Data Controller

The Little Firefly is operated by Pierre Libran, trading as Galerne Studio (sole trader, SIRET: 10699681200017), 23 rue Dumenge, 69004 Lyon, France.

Contact: galernestudio.support@proton.me

Last updated: August 2026

Information We Collect

When you register for an account, we collect:

• First name, last name, pseudonym
• Email address
• IP address (collected automatically by our hosting provider)

When you browse the site, we may collect usage data (pages visited, browser type, approximate location) via Google Analytics — only with your prior consent.

Legal Basis for Processing

We process your data under the following legal bases (UK GDPR Art. 6):

• Contract (Art. 6(1)(b)): account creation and management, access to saved articles and exclusive offers.
• Consent (Art. 6(1)(a)): newsletter subscription, analytics cookies. You may withdraw consent at any time.
• Legitimate interest (Art. 6(1)(f)): fraud prevention, site security.
• Legal obligation (Art. 6(1)(c)): compliance with applicable law.

How We Use Your Information

• To create and manage your account.
• To personalise your experience (saved articles, exclusive offers).
• To send you our newsletter, if you have subscribed. Every email includes an unsubscribe link. We process unsubscribe requests within 10 days.
• To understand how the site is used and improve it (analytics, with consent only).
• To prevent fraud and ensure site security.

Data Retention

• Account data: retained for the duration of your account, then deleted within 30 days of account deletion.
• Newsletter: retained until you unsubscribe.
• Server logs: retained for up to 90 days by our hosting provider (Railway).
• Analytics data: retained for 14 months in Google Analytics (default retention period).

Sub-processors and Third Parties

We use the following third-party services to operate the site. Each acts as a data processor under appropriate data processing agreements:

• Railway (railway.app, USA) — hosting and infrastructure. Standard server logs (IP, browser type) may be retained. Railway Privacy Policy.
• Wasabi Technologies (USA) — cloud storage for media files (article images, uploads). Wasabi Privacy Policy.
• Google Analytics 4 (Google LLC, USA) — site analytics, loaded only with your consent. Data transferred under Standard Contractual Clauses. Google Privacy Policy.
• SendGrid (Twilio Inc., USA) — transactional and newsletter emails. Data transferred under Standard Contractual Clauses. SendGrid Privacy Policy.

We do not sell your personal data to any third party.

Cookies and Tracking Technologies

We use the following types of cookies:

• Strictly necessary: session cookies required for login and site security (CSRF protection). These do not require consent.
• Analytics: Google Analytics cookies, loaded only after you click "Accept" on our cookie banner. You can withdraw consent at any time by clearing your browser cookies for this site.

You can also manage cookies through your browser settings at any time.

Affiliate Disclosure

Some links on this website are affiliate links. If you click a link and make a purchase or sign up for a service, The Little Firefly may earn a commission at no extra cost to you. Our editorial content is never influenced by affiliate relationships.

Third-Party Links

Our website contains links to third-party sites we do not operate. We are not responsible for their content or privacy practices and encourage you to review their privacy policies.

Children's Privacy

This website is not intended for children under 13 (UK) or under 16 (EU/EEA). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can delete it.

Your Rights

Under UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Data portability (receive your data in a structured format).
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, contact us at galernestudio.support@proton.me. We will respond within 30 days.

If you are unsatisfied with our response, you may lodge a complaint with:

• UK users: the Information Commissioner's Office (ICO) at ico.org.uk.
• EU/French users: the CNIL at cnil.fr.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the site. Continued use of the site after such notice constitutes acceptance of the updated policy.

Contact

For any questions about this Privacy Policy: galernestudio.support@proton.me