Privacy Policy

I keep your name, email, and order or project details to complete your order, deliver files, and follow up on your project. Payments are processed by Stripe; I never see or store your full card number. I don’t sell or share your information, except with the vendors needed to fulfill your order (such as the print lab). After a print purchase, Google Customer Reviews may ask if you'd like to rate your experience. If you opt in, Google receives your email, order number and estimated delivery date to send a short survey. Email me anytime to have your details deleted.

01 Information I collect

• Your name and email address, and your phone number if you give it. Print checkout asks for a phone number for delivery.
• Project details you send through the contact form, the estimate builder or a license request, including any photos you attach.
• For print orders, your shipping address.
• In a client gallery, the favorites and notes you leave.

Card details are entered on Stripe’s secure payment page, never on this site. Bitcoin payments go through my own BTCPay server.

02 How I use it

I use your information to process orders and payments, deliver files and prints, send invoices and receipts, communicate with you about your project, and keep sales-tax and bookkeeping records. I also keep a private list of the names and email addresses of people who have ordered or sent me a request, for 30 days after their last order or request. It is never sold or shared.

03 Who receives it

• Stripe processes card payments and invoices. It receives your name, email and the amount due, plus your shipping address and phone number for print orders.
• Lumaprints prints and ships print orders. It receives your name, shipping address and phone number (if given), along with the print file.
• Resend delivers the emails this site sends: order confirmations, invoices, estimate and license requests, contact messages and gallery picks. It handles your name, email and the message contents, including any attached photos.
• Cloudflare hosts this site, stores order records and client gallery files, and provides the visit statistics described under Cookies, local storage and analytics.
• My own BTCPay server receives your name, email and order details when you pay in bitcoin.
• Google Customer Reviews may ask, after a print purchase, if you’d like to rate your experience. If you opt in, Google receives your email, order number and estimated delivery date to send a short survey.

Each one receives only what it needs to do its part, and this site sends it to them over encrypted (HTTPS) connections.

04 Cookies, local storage and analytics

This site doesn’t use advertising or tracking cookies. The only cookie it sets is a sign-in cookie when you open a password-protected client gallery. It keeps you signed in to that gallery for up to 12 hours, and scripts on the page can’t read it.

In a client gallery, your favorites and notes are saved in your own browser’s local storage, and also with your gallery so I can see your picks and they aren’t lost. The site also remembers your scroll position for the current visit in your browser’s session storage.

To see how many people visit and which pages they look at, the site uses Cloudflare Web Analytics, a privacy-focused service from Cloudflare. It counts page visits and records which pages are viewed, the site that referred you, your browser, operating system and device type (for example, mobile or desktop), your country, and how quickly pages load. Cloudflare says it doesn’t use cookies or local storage for this, doesn’t identify or track individual visitors, and doesn’t collect visitors’ personal data. I only see the totals, and I don’t use them for advertising.

Stripe’s checkout page is run by Stripe and may set its own cookies, for example for fraud prevention. See Stripe’s privacy policy (opens in a new tab). The bitcoin payment page runs on my own BTCPay server and may set cookies needed for that payment.

05 Security

• This site is served over HTTPS.
• Card data is handled by Stripe. I never see or store your full card number.
• Order records and admin tools are protected by a private access key.
• Client galleries are password-protected, and full-resolution downloads unlock only after payment.
• Print files are sent to the lab through signed, time-limited links.

06 How long I keep it

• Unpaid orders (checkout started but not paid) are deleted after 14 days.
• Paid orders, including your shipping address and phone number, are deleted from this site 45 days after payment.
• Your name and email from the contact form, an estimate or license request, or an order are deleted 30 days after your last request or order.
• Bookkeeping records of payments (date, name, what was bought and the amount) are kept as long as required for taxes.
• Stripe, Lumaprints and my BTCPay server keep their own records of payments and orders under their own policies.

07 Contact

For privacy questions or to have your details deleted, email support@bogucki.photo.