Privacy Policy

Last updated: 12 July 2026. This policy explains what data we collect and why. It is written to be honest and plain; please still have it reviewed by a legal professional and fill in the operator details in square brackets before you rely on it.

1. Who we are

Morfio (the "Service") is a website featuring original, AI-generated fictional creatures that anyone can browse, view and vote on. The data controller is Tradeloop (Croatia), the operator of Morfio. You can reach us at contact@morfioworld.com for any privacy question or request.

2. The short version

You can browse and vote without creating an account or giving us your name. We do not sell your data or run cross-site advertising. We collect the minimum needed to count votes fairly, prevent abuse, understand aggregate traffic, and — only if you ask us to — email you about new features.

3. What we collect and why

  • Email address — only if you choose to join a waitlist. Purpose: to notify you about new features. Legal basis: your consent.
  • A browser identifier ("fingerprint") — generated in your browser by an open-source library and stored locally, then sent with your votes/views. Purpose: to count one vote and one view per visitor and to detect manipulation. Legal basis: our legitimate interest in fair rankings and abuse prevention.
  • A truncated/hashed IP address and a hashed user-agent — we do not store your raw IP address where it can be avoided. Purpose: rate limiting and abuse prevention. Legal basis: our legitimate interest in keeping the Service available and honest.
  • Activity — which creatures you view and vote for, and timestamps. Purpose: to power rankings and aggregate statistics. Legal basis: legitimate interest.

4. Cookies & local storage

We use only essential cookies and browser local storage needed to run the Service — for example a visitor fingerprint and your current session. We do not use advertising or cross-site tracking cookies.

5. Analytics

We use privacy-friendly, aggregate analytics (Umami) to understand overall traffic. It is designed to work without tracking cookies and does not follow you across other websites.

6. Third parties we rely on

We share data only with providers that help us run the Service:

  • Microsoft Azure — hosting, database and image storage. We host in the EU where possible.
  • Content delivery network (jsDelivr) — serves the open-source fingerprint library. Your browser's request to the CDN exposes your IP address to that provider.
  • Umami — aggregate analytics.
  • Ko-fi — if you choose to donate. Payment is handled entirely on Ko-fi; we never receive or store your card or payment details.

Some of these providers may process data outside the EU; where they do, appropriate safeguards apply.

7. How long we keep it

We keep data only as long as needed for the purposes above. Waitlist emails are kept until you unsubscribe. Voting and view records are retained to power rankings and prevent abuse; the identifiers attached to them are hashed and are not intended to identify you personally.

8. Your rights

Under the GDPR you may request access to, correction of, or deletion of your personal data, and may object to or ask us to restrict certain processing. You can remove your email at any time via the unsubscribe page, or contact us at contact@morfioworld.com. You also have the right to lodge a complaint with your data protection authority — in Croatia this is AZOP (Agencija za zaštitu osobnih podataka).

9. Children

Morfio is family-friendly but is a general-audience service and is not directed to children under 16. If you are under 16, please do not submit your email address without a parent or guardian's permission.

10. Changes

We may update this policy. If we make material changes we will update the date above and post the new version on this page.