What we hold
Your name, email, a password stored only as a one-way hash, the photograph you upload, the story you choose to add, and the order record. Stripe handles payment details; we keep its order and payment identifiers, not your card number.
How the handwriting is used
To model the necklace, send you a proof, cast the piece, and keep an archive card. We do not use a child’s handwriting in public, ads, or this website unless you give written permission for that one image.
How long we keep it
Order records are kept as business records. Source handwriting and proof files are scheduled for deletion 90 days after an order is marked complete, or 30 days after a commission is declined. An upload that never reaches checkout is scheduled for deletion after 24 hours. You can ask us to remove files earlier. Write to the studio.
Services we use
The site runs on Vercel, with handwriting kept in private file storage. Stripe processes checkout and payment. Resend delivers order, proof, and contact emails. Each service receives only the information needed to perform that job.
Ultrasound and medical scans
Ultrasound pieces are not offered at launch. If you ever send a medical image, crop out names, dates of birth, clinic marks, file numbers and any other identifying print before you upload. We do not need that information to make a piece.
Analytics
We count product views, create clicks, uploads started, checkout started and completed orders. No advertising cookies. No sale of data.