Privacy policy

01Who is responsible

The Georgian individual entrepreneur trading as Anime Cell, identified below, is the controller of personal data processed through this festival website. This policy explains our website, ticketing, merchandise, cosplay applications and support activities. Contact us using the details below to ask a privacy question or exercise your rights.

02What we collect & why

Orders: your name and email, selected items, amounts, order and payment references, payment status, QR ticket identifiers, entry validation and merchandise collection records. We use these to arrange and perform your purchase, deliver tickets, prevent duplicate use and deal with refunds. We retain records needed to meet accounting and other legal obligations. The legal grounds are performance of a contract, legal obligations and our legitimate interest in preventing fraud.

Cosplay and support: the information you submit, including name, email, character, performance description, optional social profile and message history. We use it to review your application, organise participation or respond to your request. The grounds are steps requested before an agreement, performance of that agreement, legitimate interests in handling enquiries and, where requested, consent. Do not send unnecessary sensitive information, card details or copies of identity documents.

Website and sign-in: technical logs may include IP address, request time, requested page, browser details and security events. Essential cookies support language choice, checkout, sign-in and protection against forged form submissions. Google sign-in, if used, provides an account identifier, name, email and verification status; we do not receive your Google password. These activities support secure operation and the service you request. Required form fields are marked; without the necessary contact or order information we cannot complete the relevant request. Browsing does not require an account.

03Cookies & external services

The language preference lasts up to one year. Checkout session data expires after 30 minutes of inactivity. Authentication and form-security cookies follow the relevant session or sign-in lifetime. You can remove cookies in your browser, but this may reset your language or interrupt checkout and sign-in. We do not currently run advertising pixels or optional analytics cookies on this site.

The venue map loads only when you choose to load Google Maps. Doing so connects your browser to Google and may disclose technical data such as your IP address; Google applies its own privacy and cookie policies. Social-media links similarly take you to the relevant provider. Buying a ticket or submitting an application is not consent to marketing. Any future marketing requires a separate choice and an easy way to withdraw it.

04Who receives information

Access is limited to authorised organisers and staff who need it, and service providers supporting hosting, email delivery, payments and security. Keepz and participating banks process payment information under their own applicable obligations. Venue or admission staff receive only what they need for entry or collection. Information may also be disclosed to advisers or competent authorities when necessary and lawful. We do not sell personal data.

Some providers, including Google and social platforms you choose to use, may process information outside Georgia. Transfers arranged by us must meet Georgian legal requirements and use an appropriate legal ground and safeguards. Contact us for information about the destinations and safeguards relevant to your data. External providers’ own processing is described in their privacy notices.

05Retention & protection

We keep information only while it is needed for its purpose: order records for fulfilment, refunds, disputes and mandatory accounting periods; applications for selection and event administration; support history while handling the issue and any related claim; security logs for investigating incidents and preventing abuse. Retention is determined by applicable legal periods, unresolved obligations and whether the data are still necessary. Once those reasons end, data must be deleted or anonymised, including through the backup lifecycle.

We use encrypted website connections, restricted staff access and access controls for administration. No online system can promise absolute security. Keep your order link and QR code private. We do not make decisions with legal or similarly significant effects solely through automated profiling.

06Your rights & contact

Subject to Georgian law, you may request information, access and copies, correction, deletion or an end to processing, blocking, portability where applicable, and review of solely automated decisions. You may withdraw consent without affecting earlier lawful processing. We may need proportionate identity verification. Some records must be retained for legal obligations or claims; if we refuse a request, we will explain why and how to appeal.

Contact support with the subject ‘Privacy request’. Information and access requests are normally answered within 10 working days; a justified extension of up to 10 further working days may apply with notice. Other rights follow their statutory deadlines. You may complain to the State Audit Office of Georgia, the personal-data supervisory authority since 2 March 2026, and/or a competent court.

07Age, photography & updates

The festival is 18+. We do not seek applications or purchases from children; contact us if a child has supplied data. Event photography or filming will be explained through appropriate notices. Attendance does not give us unrestricted permission to use your portrait for advertising; where consent is required, we will request it separately. Tell staff or support about photography concerns. This policy will be updated when our practices change, with the revision date shown above.