Privacy policy

Last updated: 9 October 2026

1. Who we are

MRRfetti is a fabrica.studio project. fabrica.studio is the data controller. Contact: hello@fabrica.studio.

2. What MRRfetti does

MRRfetti is an Android TV and Google TV app. It shows a celebration on your TV when your payment provider (Stripe, RevenueCat, Paddle, etc.) sends a sale notification to your unique webhook URL.

3. No account, no personal profile

Your TV uses an anonymous identifier. We don’t ask for your name, email or phone number.

4. Data we process and why

• Sale notifications. Your provider sends each sale to our server. We verify it, extract only what the celebration needs (amount, currency, product or plan name, provider, and whether it is a test) and encrypt it for your TV within milliseconds. We do not store or log amounts or the notification contents. What we store is encrypted and only your TV can read it. It is deleted after your TV shows it, or after at most about 8 days if your TV never comes online (a 7-day expiry plus up to 24 hours for deletion). We never keep the buyer’s personal data (name, email, address, card).
• Metadata we do see. When and how many notifications reach your URL, plus technical request data (IP address, timestamp), kept briefly for security and abuse prevention. Duplicate-detection records are hashed and kept for up to 3 days (60 days for WooCommerce).
• Integration settings. Webhook signing secrets (encrypted with Google Cloud KMS), your app name, logo, colour and sound for celebrations, and your preset choices.
• Device data. The anonymous TV identifier, your TV’s public encryption key, and a Firebase Cloud Messaging token used to wake the TV.
• Purchases. Handled by Google Play. Entitlements are managed with RevenueCat. We don’t see your card details.
• Configuration panel. A 30-day session cookie, strictly necessary and not used for tracking, that links your browser to your TV.
• Website. No analytics, no tracking, no third-party scripts.

5. Legal bases (GDPR)

• Performance of the service you request (art. 6.1.b GDPR).
• Our legitimate interest in security and abuse prevention (art. 6.1.f GDPR).

6. Processors

Google (Firebase, Cloud Run, Cloud KMS, Firebase Cloud Messaging, Google Play), RevenueCat (purchases) and Cloudflare (DNS only; it does not see sale data). Data is hosted in the EU (europe-west1). Processors may process data outside the EEA under standard contractual clauses.

7. Retention

As described above. Settings are kept until you remove the integration or uninstall or reset the app on your TV. You can delete them at any time from the TV (“Reset”).

8. Your rights

You have the right to access, rectification, erasure, restriction, objection and portability. Write to hello@fabrica.studio. You can also lodge a complaint with the Agencia Española de Protección de Datos (aepd.es).

9. Children

MRRfetti is not directed at children under 16.

10. Changes

If this policy changes, we’ll update this page and the date at the top.