Privacy Policy & Terms of Service

TwoShirtz Studio (twoshirtz.store) is operated by TwoShirtz, based in Norway. TwoShirtz is the data controller responsible for your personal data under the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

Contact: legal@twoshirtz.com

We collect only what is necessary to provide the service:

• Account data — your email address and hashed password, or your Google profile (name, email, avatar) if you sign in with Google.
• Download log — a record of which images you have downloaded, used to manage access and detect abuse.
• Marketing consent — a flag indicating whether you have consented to receive marketing communications from TwoShirtz.
• Analytics data — anonymised, aggregated page-view data collected via Vercel Analytics. No cookies are set; no personal data is stored.
• Technical data — session cookies strictly necessary for authentication. No advertising or tracking cookies are used.

We process your personal data on the following GDPR legal bases:

• Performance of a contract (Art. 6(1)(b)) — processing your account data and download log is necessary to provide the service you signed up for.
• Consent (Art. 6(1)(a)) — sending you marketing communications is based on the explicit consent you gave at registration. You may withdraw this consent at any time (see section 1.9).
• Legitimate interests (Art. 6(1)(f)) — anonymised analytics to understand how the service is used and improve it.

• To authenticate you and manage your account.
• To control access to full-resolution image downloads.
• To log download activity for abuse prevention.
• To send you transactional emails (e.g. email confirmation, password reset).
• To send you marketing communications about TwoShirtz Studio, twoshirtz.com, and other TwoShirtz applications and services — subject to your consent.
• To analyse aggregated, anonymised usage patterns to improve the service.

We use the following third-party sub-processors, all of whom have signed data processing agreements:

We do not sell your personal data to any third party.

We use only strictly necessary cookies — session tokens set by Supabase to keep you signed in. No advertising, tracking, or third-party analytics cookies are used.

Vercel Analytics collects anonymised, aggregated data (page views, referrers, country-level location). It is fully cookieless and does not identify you individually.

Supabase stores your data in the EU (Ireland, AWS eu-west-1). Vercel and Google are based in the USA. For these transfers we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection.

• Active accounts — data is retained for as long as your account is active.
• Deleted accounts — all personal data is permanently deleted within 30 days of account deletion.
• Download logs — retained for up to 2 years for abuse prevention, then permanently deleted.
• Anonymised analytics — retained indefinitely, as no personal data is stored.

When you create an account on TwoShirtz Studio, you consent to receiving relevant communications from TwoShirtz by email. This may include:

• Updates and new features on twoshirtz.store.
• News, releases, and information from twoshirtz.com.
• Announcements about other sites and applications operated by TwoShirtz.

This consent is given at registration and is recorded. You may withdraw your consent at any time by emailing legal@twoshirtz.com with the subject line "Unsubscribe". Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We will not send you unsolicited commercial emails unrelated to TwoShirtz products and services.

Under GDPR and the Norwegian Personal Data Act, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to pause processing of your data in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw your marketing consent at any time without affecting prior processing.

To exercise any of these rights, contact us at legal@twoshirtz.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority: Datatilsynet (datatilsynet.no).

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision.

By creating an account or using TwoShirtz Studio (twoshirtz.store), you agree to be bound by these Terms of Service. If you do not agree, you must not use the service.

You must be at least 16 years old to register. By registering, you confirm that you meet this requirement.

TwoShirtz Studio is a digital gallery of AI-generated artwork operated by TwoShirtz (Norway). Registered users may browse and download full-resolution images for personal use free of charge.

TwoShirtz reserves the right to modify, suspend, or discontinue any part of the service at any time. We will provide reasonable advance notice of material changes where possible.

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must not:

• Share your account credentials with others.
• Impersonate any person or entity.
• Create accounts by automated means or for automated purposes.
• Attempt to access another user's account.

You must notify us immediately at legal@twoshirtz.com if you suspect unauthorised use of your account.

Upon downloading an image from TwoShirtz Studio, TwoShirtz grants you a limited, non-exclusive, non-transferable, personal-use licence to use that image. This licence is subject to the following conditions:

• Personal use only. Downloaded images may be used for personal, non-commercial purposes — such as wallpapers, personal prints, or personal creative projects.
• No redistribution. You may not sell, sublicence, share, or otherwise distribute downloaded images to third parties, whether in original or modified form.
• No commercial use. Downloaded images may not be used in any commercial context, including advertising, merchandise, products for sale, or commercial publications, without prior written permission from TwoShirtz.
• No misrepresentation. You may not claim authorship of, or ownership of, any downloaded image.

For licensing enquiries or commercial use requests, contact legal@twoshirtz.com.

All artwork, images, and visual content on TwoShirtz Studio are owned by TwoShirtz and are protected by copyright and applicable intellectual property laws. The download licence in section 2.4 does not transfer any ownership rights to you.

The TwoShirtz name, logo, and branding are trademarks of TwoShirtz. You may not use them without prior written permission.

You agree not to use TwoShirtz Studio to:

• Violate any applicable law or regulation.
• Attempt to gain unauthorised access to any part of the service or its infrastructure.
• Scrape, crawl, or systematically download content in bulk.
• Circumvent any rate limits, access controls, or security measures.
• Use the service in a manner that could damage, disable, or impair it.
• Use downloaded images in a way that violates the licence in section 2.4.

TwoShirtz Studio is provided "as is" without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or uninterrupted availability.

All artwork is AI-generated. TwoShirtz makes no claims about the accuracy, completeness, or originality of any generated content.

To the maximum extent permitted by applicable law, TwoShirtz shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the service.

Nothing in these Terms limits TwoShirtz's liability for gross negligence, wilful misconduct, or liability that cannot be excluded under Norwegian law or applicable consumer protection rules.

You may delete your account at any time by contacting legal@twoshirtz.com. Upon deletion, your personal data will be removed within 30 days as described in section 1.8.

TwoShirtz may suspend or terminate your account if you breach these Terms, engage in abusive or harmful conduct, or if we are required to do so by law.

We may update these Terms of Service from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. Continued use of the service after that date constitutes acceptance of the updated Terms.

These Terms are governed by the laws of Norway. Any disputes arising from or relating to these Terms or your use of TwoShirtz Studio shall be subject to the exclusive jurisdiction of the Oslo District Court (Oslo tingrett), unless mandatory consumer protection rules in your country of residence require otherwise.

If you are an EU consumer, you may also use the EU Online Dispute Resolution platform at ec.europa.eu/consumers/odr.

For any legal enquiries, data requests, or licensing questions, contact us at:

legal@twoshirtz.com

TwoShirtz, Norway
twoshirtz.com