Privacy policy
This page describes the data this application actually stores today. It is not legal advice and should be reviewed by counsel before a public launch.
What we collect
Account records may include name, email, phone, a hashed password, email verification time, and optional marketing consent.
Quote records include contact details, specifications, messages, and uploaded artwork. Guest quotes also store the email used on the form and a private access token.
Orders include line items, amounts in integer cents, US address fields, payment status, and optional notes. Card numbers are not collected or stored by this application.
Contact form submissions include name, email, optional phone, topic, and message.
How the data is used
We use quote and order data to review artwork, issue prices, produce custom patches, and send transactional messages about those requests.
Marketing email is sent only when marketing consent is recorded. Transactional quote and order messages are separate.
Staff with admin access can open quotes, orders, artwork, and contact messages in order to fulfill work.
Artwork and files
Uploaded artwork is stored on a private disk. Files are not served from a public directory listing. Download links require a quote token, an authenticated customer on the related order, or staff access.
Cookies
The site uses a session cookie, a cart token cookie so a guest cart can persist, and an analytics-consent cookie after you choose Allow or Decline.
Optional analytics tags (Google Tag Manager or Google Analytics, if configured) load only after analytics consent is granted. Conversion events are queued in the browser until that choice is made.
Requests about your data
Use the contact form to ask about access or deletion. We may need to verify the email on the account or quote before changing records that are still needed to complete an order.
Questions about a live request belong on that quote or order. General questions can use the contact form.