Privacy Notice

Who is responsible for my data?

PaintedApp, LLC runs Painted Natal and is the controller of the personal data described here. Our mailing address is 1327 SE Tacoma St #394, Portland, OR 97202, United States, and you can write to support@painted.app about anything on this page. We collect little, keep it only as long as it's useful to you or the law requires, and never sell it.

What happens to the birth I enter?

It stays in this tab until you order.

The date, the time on the clock and the town are turned into Universal Time and placed as a chart by this page's own code, on your device. Your choices are kept after the # in the page's address, the part a browser never sends to a server, so you can bookmark the plate and come back to it. Anyone you share that link with sees the same birth and title, so share it as you would the birth itself.

The town box downloads the whole list of towns once, from our site, and searches it in the tab. The request carries nothing you typed. When you open checkout, the page also keeps its address in this tab's session storage, so a cancelled checkout can bring you back to the same plate. That copy goes when the tab closes.

What is processed where?

Do you use cookies or analytics?

No.

This site sets no cookies and runs no analytics, advertising pixels or third-party trackers. If that ever changes, this page changes first, and we'll ask before loading anything. Stripe's checkout page is Stripe's own: it may set its own cookies to prevent fraud, under Stripe's privacy policy.

What do you collect when I order?

Only what it takes to make your print and get it to you.

• Your name and shipping address, to print and deliver your order. A Digital File needs no address, so none is asked for.
• Your email address, to send your receipt and to reach you about the order.
• The plate you set: the birth in UT with its offset and time zone, the town and its coordinates, the house system, your title, and your choices of ground, ink, sheet, size and material. The plate prints the birth, the town and the title, so the print file carries them too.
• Payment details: we never receive them. Stripe collects and holds your card details directly; we see the outcome and nothing more.

We use these to carry out the order you placed, and we keep the record because tax and accounting law require it. There are no accounts.

Who else sees it?

Only the companies that make the order happen, and only the part each one needs.

• Stripe: payment processing. It collects your card and billing details directly and holds the record of your order, with the plate's title, the town, and the date and clock time of the birth.
• Prodigi or Printful: printing and shipping, by whichever of the two makes your print. That lab receives your name, shipping address, email address, the order details and the print file, which shows the birth as the plate prints it. When your print ships we get the carrier and tracking number from it and email them on to you. Asking both labs for a shipping price sends only the print size and the country, nothing about you.
• Resend: sending your receipt, your file and your tracking link. It receives your email address and the message, which carries a picture of the plate.
• Vercel: hosting the site, running the checkout and storing the print file. Like any web host, it sees your IP address when your browser asks for a page.

The print file, and a small preview of it, are stored on Vercel Blob at an unlisted address made from a fingerprint of your choices, so the same plate ordered twice is drawn once. The file is drawn when you open checkout, so it exists even if you don't go on to pay. The lab collects it from there to print. Like your order record, nothing deletes it on a clock today; ask us and we'll remove yours.

Some of these companies operate outside your country, including in the United States. We don't share your data with anyone for their own marketing.

Will you email me after I order?

About that order, and nothing else.

Every order gets the emails it needs: the receipt, your file, and for a print, the tracking link when the lab ships it. We send nothing later about the birth: no birthday reminders, no horoscopes, no newsletter, and checkout doesn't ask to.

Where is my order kept, and for how long?

In Stripe. We keep no database of our own.

The record of your order, meaning what you bought, your email and the address it went to, lives in Stripe, and the lab that made your print keeps its own record of the job. We keep it for support, for our promise on damaged or wrong prints, and for tax and accounting. Nothing deletes it on a clock today; ask us to delete it and we will, unless the law requires us to keep it.

What are my rights?

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, and we'll act within 30 days. Because there are no accounts, requests come by email: write from the address you ordered with. If you're in the EEA or the UK you also have the right to object to processing, to ask for portability, and to complain to your local data protection authority.

If you're in California or another US state with a privacy law, you have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We don't sell or share personal information, for money or for advertising, so there's nothing to opt out of. We honour Global Privacy Control signals all the same, and we'll never charge you differently for exercising any of these rights.

Children

This shop is for adults. A plate is often ordered for a child's birth, and that's the parent's order: we don't knowingly collect data from anyone under 16. If a child has given us something, write to us and we'll remove it.

Changes

If this notice changes, the date at the top changes with it. The terms of service and the shipping and returns page cover the rest of an order.