Privacy Policy

Last Updated: October 8, 2026

Brand: Bitbotsworld

At Bitbotsworld (accessible from https://bitbotsworld.com), protecting your personal data is a top priority. This Privacy Policy explains how we collect, use, process, and store your information in compliance with the European General Data Protection Regulation (GDPR / UK GDPR), US privacy legislation (including CCPA/CPRA), and applicable international privacy frameworks.

The entity responsible for processing your personal data on this website is:

Bitbotsworld
c/o Matthias Schatten
Im Sennteich 28
68199 Mannheim
Germany

Email: [email protected]

When you purchase a product or register an account, we collect:

• Full name, billing address, shipping address, email address, and phone number.
• Transaction details, order history, and ordered custom specifications.
• For registered users: Profile information provided in your account. You can view, edit, or delete your personal information at any time (except your username).

When visitors leave comments on the site, we collect:

• Data shown in the comments form, the visitor’s IP address, and browser user agent string to assist in spam detection.
• An anonymized string created from your email address (a hash) may be provided to the Gravatar service to check if you use it. The Gravatar privacy policy is available at https://automattic.com/privacy/. Upon comment approval, your profile picture is visible publicly alongside your comment.

If you subscribe to our newsletter, we collect your email address and consent timestamp. You may withdraw your consent and unsubscribe at any time via the link provided in every newsletter.

If you upload images to the website, avoid uploading images with embedded location data (EXIF GPS). Visitors could download and extract location data from images hosted on the site.

We share necessary data with trusted service providers strictly to perform our contractual duties:

• Web Hosting: Hosted on IONOS infrastructure in secure European Union data centers.
• Print-on-Demand Fulfillment: To manufacture and ship your custom items, recipient names, shipping addresses, and order details are transmitted to Gelato AS. Data processing is secured via a Data Processing Agreement (DPA) including Standard Contractual Clauses (SCCs).
• Shipping & Logistics Carriers: Gelato passes delivery details to international and local logistics providers (e.g., DHL, FedEx, UPS, USPS) solely for shipment fulfillment and tracking.
• Payment Gateways & Cryptocurrency Processors: Transactions are processed securely via external payment providers (e.g., Stripe, PayPal, or BTCPay Server). For Bitcoin payments, please note that transaction details (e.g., Wallet Address, TXID) are immutably recorded on public blockchains by nature of the technology.
• Spam Detection: Visitor comments and form submissions may be screened through automated spam protection tools.
• Local Assets & Fonts: Web fonts (Google Fonts) are self-hosted locally on our server to ensure user IP addresses are not transmitted to third-party font servers.

• Functional & Session Cookies: Essential cookies manage your shopping cart, user logins, and comment preferences (storing name/email for up to 1 year upon opt-in).
• Consent Management: Non-essential analytical or marketing tracking cookies are governed via our Cookie Banner, where you can give or revoke consent at any time.
• Embedded Content: Articles on this site may include embedded third-party content (e.g., videos, images). Embedded content behaves as if the visitor visited the third-party website, which may collect data or set cookies.

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by applicable law:

• Order & Tax Records: Retained for up to 10 years to satisfy statutory commercial and tax retention requirements.
• Comments & Metadata: Retained indefinitely so follow-up comments can be recognized and approved automatically.
• Server Log Files: Retained for security purposes for up to 30 days and then automatically deleted.

Our website and products are not intended for individuals under the age of 16. We do not knowingly collect or solicit personal data from children. If we learn that we have collected data from a child without parental consent, we will delete it promptly.

Regardless of your location, you have the following rights regarding your personal data:

• Right of Access & Data Portability: Request a copy or an exported file of the personal data we hold about you.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data (subject to legal retention duties).
• Right to Rectification & Restriction: Request correction of inaccurate information or restriction of data processing.

To exercise any of these rights, please contact us at [email protected].

Bitbotsworld does not sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate your personal information to third parties for monetary or other valuable consideration. We only share information as necessary with our trusted service providers (e.g., Gelato for fulfillment, carriers for shipping, payment gateways for order processing) strictly to process and deliver your orders.