Privacy Policy

Who we are

We run a small print-on-demand storefront. This page explains what we collect, why we collect it, and what you can do about it. If you have questions or want to exercise any of the rights below, email era.web.services@gmail.com. That same address is the data controller's contact.

What we collect

The catalog of fields we may hold about you:

• Name — required for shipping. Sent to Stripe and our fulfillment partner.
• Email address — required for order confirmation. Sent to Stripe; also used by us for transactional emails.
• Shipping address — required to ship. Sent to Stripe and to our fulfillment partner so the package reaches you.
• Billing address & payment method — collected and stored by Stripe. We see only a token plus card brand and last four digits.
• Order contents — what you bought, quantities, prices.
• Usage information — pages viewed, products clicked, items added to cart, approximate country derived from IP. Only collected if you accept analytics cookies.
• Cookies — strictly necessary cookies for the cart and CSRF protection, plus analytics cookies (only with consent).

Legal basis (GDPR Article 6)

• Contract performance for order processing, shipping, payment, customer support, and transactional emails. Without this data we cannot fulfill the order you placed.
• Consent for analytics cookies and any future marketing. You can withdraw consent at any time on the cookie preferences page.
• Legal obligation for tax and accounting records.
• Legitimate interest for fraud detection and basic site security.

Third-party processors

These are the only third parties that receive your personal data, and only the parts they need:

• Stripe — payments. Receives your name, email, billing address, and card details directly. Stripe privacy policy.
• Printify — fulfillment. Receives your name, shipping address, and the items in your order so the package can be produced and shipped. Printify privacy policy.
• YouTube (Google LLC) — the product videos we generate are uploaded to YouTube. No customer-identifying data is sent to YouTube; only the video file, title, description, and a product link. Google privacy policy.
• PostHog — product analytics. Loaded only with consent. Receives the page URL, anonymized session ID, and event-level interactions. PostHog privacy policy. (Not currently active on this site.)
• Plausible — privacy-friendly traffic analytics. Loaded only with consent. No cross-site tracking cookies. Plausible privacy policy. (Not currently active on this site.)

Data retention

• Orders — kept for seven years to meet tax and accounting obligations, after which they are deleted or anonymized.
• Analytics — individual events are aggregated and stripped of identifiers after 90 days.
• Support emails — kept for as long as needed to resolve the issue, and then archived for up to two years.

Your rights under GDPR

If you live in the EEA or UK, you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectify — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data, subject to legal retention obligations (e.g. tax records).
• Portability — ask for your data in a machine-readable format.
• Restriction — ask us to pause processing while a dispute is resolved.
• Object — object to processing based on legitimate interest.

How to exercise your rights

Email era.web.services@gmail.com with the request. Mention the email address you used at checkout so we can find your records. We respond within 30 days as required by GDPR Article 12. We may ask for additional information to verify your identity before acting on the request.

For deletion requests you can also use the in-product form on the cookie preferences page, which queues the request for our review.

Supervisory authority

If you believe we are mishandling your personal data, you have the right to lodge a complaint with your local EU/EEA data protection authority. A list of national supervisory authorities is maintained by the European Data Protection Board: EDPB members.

Data controller contact

The data controller for this site is the operator of the storefront, reachable at era.web.services@gmail.com. That is the right address for any privacy or data-protection question.