We only collect information that's needed to run the shop:

• Account details — if you create an account, we store your email address and, if you give it, your name. Passwords are handled by Supabase Auth and never stored by us in a readable form.
• Order details — for every order we store your email, the items purchased, the subtotal, and (for orders with printed or 3D-printed items) the shipping address you enter at checkout.
• Contact form messages — if you use our contact form, the name, email, and message you send are forwarded to us by email through Resend and are not stored in a separate database.
• Reviews you submit — the quote, the name or initials you choose to display, and the optional location you enter.
• Anonymous traffic data — Cloudflare Web Analytics records aggregated page-view data (which pages loaded, roughly where visitors came from). It uses no cookies and does not identify individual visitors.

We do not use advertising trackers, remarketing pixels, or third-party behavioural-advertising cookies.

We accept payment via PayPal, Venmo, and credit or debit cards. We never see or store your full card number, CVV, or bank details — those go directly to the payment processor, who returns only a confirmation and a reference number to us.

We store that reference number, the amount, and the status (pending, paid, refunded) so we can look up your order and honour refunds.

A small number of services help us run the shop. Each processes only what it needs, on our behalf, and under its own privacy policy:

• Supabase — database and account authentication.
• Cloudflare — site hosting (Pages), image storage (R2), DNS, and cookieless analytics.
• PayPal — payment processing.
• Square — payment processing.
• Resend — sending transactional emails (order confirmations, contact-form relays).
• Google Fonts — loading the display and body typefaces used across the site.

Cookies and browser local storage are used for site function only, not for tracking:

• A Supabase session cookie keeps you signed in after you log in.
• Your cart is stored in your browser's local storage so it survives page refreshes. It never leaves your device until you check out.
• A small local-storage flag remembers that you dismissed the cookie notice, so it doesn't show again on your next visit.

You can clear these at any time in your browser's site-settings. Doing so will sign you out and empty your cart.

We send email only in response to your actions: an order confirmation with a download link when you buy, and a reply if you contact us. We do not run a marketing list and will not add you to one without asking.

Order records are kept for the life of the shop so we can honour refunds, resupply lost downloads, and comply with tax record-keeping. Account records are kept for as long as your account is open. Contact-form messages sit in our email inbox like any other email and are pruned over time.

If you want your account or an order deleted from our records, email us — see the address at the end of this page.

Depending on where you live, you may have the right to request a copy of the personal information we hold about you, to ask us to correct it, or to ask us to delete it. To exercise any of those rights, email us and we'll respond within a reasonable time.

California residents have specific rights under the CCPA, including the right to know what personal information we collect and the right to have it deleted. We do not sell personal information in the CCPA sense.

This site is intended for adults purchasing art supplies and downloads. We do not knowingly collect personal information from anyone under 13. If you believe a child has submitted information to us, please email us and we'll delete it.

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of the page. Material changes will be posted here before they take effect.

Questions about this policy, or about the personal information we hold about you? Email us at decodigitaldesigns@gmail.com.