DRAFT for owner review. This page is a plain-English starting point, not legal advice and not yet reviewed by a lawyer. Turnip Ink LLC must review and complete the [bracketed] items before launch. Remove this notice and the noindex tag when approved.

Privacy Policy

Last updated: [DATE]

What we collect

• Order details: your name, email address, what you bought, the amount, your country, and (for physical orders) the delivery name and address.
• Payment: collected and processed by Stripe. Your card details go to Stripe only; we never receive them. Stripe also collects your billing and shipping address on every order, including digital orders, as a fraud check.
• Technical logs: our server records the time, page requested, response code and your IP address for security and abuse prevention. Logs do not contain your email, address, order access keys or download tokens.
• Fraud-prevention and proof-of-delivery records: for every paid order we keep a tamper-evident activity record: when you placed the order and your IP address, browser (user agent) and language; your acceptance of the Terms; the card’s brand, last four digits, country and the fraud-risk result Stripe gives us (never the full card number); each time you opened your order page or downloaded a file, with the time, IP address, browser, the file name, a cryptographic fingerprint (SHA-256) of the file we delivered, how many bytes were sent and whether the download completed; and whether our order emails were delivered. We use it to detect fraud and card testing (for example many orders from one IP address or card) and as evidence of delivery if a payment is disputed with your bank or card network. Where we detect many different networks using one order link, we may lock the download links and ask you to contact us.
• On your device: your cart and light/dark preference are kept in your browser’s local storage. We do not use advertising or analytics cookies, and there is no tracking pixel.

How we use it

To take payment, deliver your files, make and ship your order, send your order email, prevent fraud and abuse, keep business and tax records, and answer your questions. We do not sell your information and do not send marketing email unless you ask us to.

Who it is shared with (service providers)

• Stripe: payments, fraud screening and receipts. If a payment is disputed we send Stripe, and through it your bank and the card network, the evidence record described above (your name, email, billing details, purchase IP address and download activity).
• Resend: sends our order emails (your email address and order link) and tells us whether they were delivered.
• Fly.io: hosting in the United States. Tigris (via Fly.io): encrypted backups of our order database.
• Google Fonts and jsDelivr: your browser loads fonts and the 3D viewer from them, so they see your IP address and browser details when you visit.
• Carriers: your delivery name and address, for physical orders. We may also disclose information if the law requires it.

How long we keep it

• Paid order records: [7] years, for tax and bookkeeping.
• Checkouts that were never paid: deleted after 30 days.
• Generated download files: deleted 30 days after the download link expires (they can be regenerated if you ask).
• Fraud-prevention and proof-of-delivery records (IP address, browser, download activity): at least 24 months after the order, because card networks accept disputes for up to about 120 days (longer in some cases), then deleted. Records for an order under dispute are kept until the dispute is closed.
• Server logs: [30] days.

Your choices

You can ask to see, correct or delete your information by emailing the.turnip.ink@gmail.com. We will do so unless we must keep it for legal or tax reasons. [OWNER: add any state-specific rights notices you need, e.g. California.]

Children

The shop is not aimed at children under 13 and we do not knowingly collect their information.

Changes and contact

We will post changes here. Contact: the.turnip.ink@gmail.com, Turnip Ink LLC, [BUSINESS ADDRESS].