Privacy Policy

This Privacy Policy explains how Anastasia Vladimirovna Bolotova, a sole proprietor (FOP Болотова Анастасия Владимировна) trading as ExtraHeads, of Prospect Peremohy 26, apt. 5, Dnipropetrovsk, 49000, Ukraine, collects, uses, and protects your information when you visit extraheads.com or purchase our digital marketing templates. We are the data controller for the storefront data described in this policy. Our website operates without storefront user accounts or direct credit card collection; however, we do have a checkout email field for delivery purposes.

Our website is hosted on Cloudflare Pages. To serve the website securely and reliably over the internet, our hosting infrastructure automatically processes basic technical requests. No marketing trackers or analytics software are configured in the static site source. Cloudflare processes website requests under its own applicable practices.

We sell our templates via one-time cryptocurrency payments using NOWPayments, which provides independent hosted payment invoices. NOWPayments operates its own privacy practices, which you can review directly at https://nowpayments.io/doc/privacy-policy. We do not collect credit card details on extraheads.com.

Before paying, you enter a delivery email on extraheads.com. We collect that email solely to deliver the template automatically once NOWPayments reports the payment as finished, and to send order notices. If automated delivery fails, we use this email correspondence to manually verify your order and provide support.

Where data protection laws apply, we process your information relying on specific legal bases. We process your delivery email, email correspondence, and order details as a contractual necessity to deliver your purchased templates. We rely on legitimate interests to process technical hosting data to maintain storefront security and to manage customer support inquiries. We also process necessary transaction records to comply with legal obligations regarding accounting and record-keeping.

We share your data only to operate the storefront and fulfill our legal responsibilities. Our primary service providers are Cloudflare for hosting and order storage, NOWPayments for hosted cryptocurrency invoicing, and Resend for transactional email delivery.

We retain your email correspondence and order confirmation details for as long as necessary to provide ongoing support and to satisfy our legal, tax, and accounting obligations. We do not specify an exact retention duration, as legal holding requirements vary.

We operate from Ukraine, and our infrastructure providers maintain servers globally. When you interact with our storefront or email us directly, your information is processed internationally.

Depending on your jurisdiction, you possess applicable privacy rights regarding your personal information. These generally include the right to request access to the data we hold, request corrections, ask for deletion, or object to specific processing. Please note that we cannot guarantee that all deletion requests will result in complete erasure, as we may be legally required to retain transaction correspondence. You also have the right to lodge a complaint with your local data protection authority. To exercise your rights, contact us at [email protected].

ExtraHeads delivers a public template link. Our storefront is entirely independent of xAI or X. ExtraHeads does not receive your Grok Bot chats or account logins as part of checkout or template delivery.

If you have any questions about this privacy policy or our data practices, please email Anastasia Vladimirovna Bolotova at [email protected], or write to Prospect Peremohy 26, apt. 5, Dnipropetrovsk, 49000, Ukraine. Last updated: 8 November 2026.