Privacy policy

This policy covers the store at uvprints.us, run by Excited State. “We” and “us” mean that shop. It is based in the United States.

When you browse

Our hosting provider keeps standard server logs for every request: IP address, browser type, the page asked for and the time. Every web server does this. We do not run analytics, advertising pixels, social media plugins or any other third-party tracking script. Fonts and artwork are served from our own site.

Your cart

There are no accounts. Your cart is saved in your own browser (local storage), on your device: which design, which product, which finish and how many. When you start a checkout, your browser also saves one marker that identifies that checkout, so the cart can be emptied after you pay. Neither is a cookie. The cart contents are sent to our server only when you press Checkout, to build the payment page.

When you order

Payment happens on a page hosted by Stripe. There you enter your name, email address, shipping address and card details, plus your phone model if you are buying a phone case. Stripe may also ask for a billing postal code or address to verify the card.

We then see the order in our Stripe account and on the computer we print from: your name, email, shipping address, the phone model you picked, what you bought and what you paid. Of your card we see only the brand, the last four digits and the expiry date. We never see or store the full card number or the security code.

To stop automated abuse, our checkout counts recent attempts per IP address. That count lives only in the server’s working memory. We do not save it to a database.

When you contact us or ask for a custom print

If you email us, we get your email address and whatever you write. A custom print request collects your name, email address, the product and quantity you want, your description of the design and the artwork file if you attach one.

Newsletter

If you sign up for new-drop emails, we keep the email address you give us for that purpose and nothing else.

Right now the custom request form and the newsletter signup are closed, so neither one collects anything.

Our site sets no cookies. It has no analytics, no ad pixels and no fingerprinting. The only things stored on your device are the cart and the checkout marker described above. No other company collects information about your activity over time and across different websites through our site.

The payment page is Stripe’s own site and uses Stripe’s own cookies, for fraud prevention among other things. That is covered by Stripe’s privacy policy.

Do Not Track and Global Privacy Control: we do not track you across sites and we do not sell data, so there is nothing to switch off. The site behaves the same whether or not your browser sends either signal.

• To make your order and ship it to you.
• To send order updates, such as a tracking link.
• To answer your questions and fix problems with an order.
• To quote and produce a custom print you asked for.
• To prevent fraud and abuse of the checkout.
• To keep the business records that tax and accounting rules require.
• To send new-drop emails, only if you signed up for them.

We do not sell your information, share it for advertising or use it to build a profile of you.

• Stripe processes the payment, screens for fraud and holds the order and payment record.
• Amazon Web Services hosts the site (AWS Amplify and CloudFront) and keeps the server logs.
• The shipping carrier and the postage service we use get your name and shipping address, so the package can reach you.
• A partner printer, when we offer an item made by one. Such an item is labelled on its product page. If the partner ships it straight to you, it gets your name and shipping address for that delivery only.
• Our email provider carries the messages when you write to us or we write to you.
• Authorities, when the law requires it, for example a valid court order.

That is the whole list. No data brokers, no ad networks.

• Cart and checkout marker: they stay in your browser until you finish a checkout, press “Clear cart” or clear this site’s data. An unfinished checkout can leave the marker behind; it holds only a checkout reference, nothing about you. We do not keep a copy of your cart on our servers.
• Order records: what you bought, where it shipped and what you paid are kept for as long as tax and accounting rules require, which is usually several years. Stripe keeps its own payment records under its own policy.
• Emails and custom requests: kept while the conversation or the job is active and for a reasonable time afterwards in case of follow-up questions.
• Newsletter address: until you unsubscribe.
• Server logs: they stay in our AWS hosting account and are used only for troubleshooting and security.

• Empty your cart with the “Clear cart” button on the cart page, which also removes the checkout marker, or by clearing this site’s data in your browser settings.
• Ask what we hold about you, ask us to correct it or ask us to delete it. Use the Contact section below. We answer within 45 days.
• Unsubscribe from new-drop emails at any time, with the link in any of those emails or by contacting us.

Two limits. We may need to confirm that a request really comes from you, usually by having you write from the email address used on the order. And we cannot delete records we are required to keep, such as the record of a sale; payment records held by Stripe follow Stripe’s rules.

The store is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child under 13 has given us personal information, tell us through the Contact section below and we will delete it.

California buyers

We do not sell personal information and we do not share it for targeted advertising. The California Consumer Privacy Act applies to businesses above size thresholds this shop is far below, such as $25 million in yearly revenue. The choices above are open to you anyway: you can ask to see, correct or delete your information, and we will not treat you differently for asking.

Canadian buyers

Your information is handled in the United States, by us and by the providers listed above, so it is subject to US law while it is there. You can ask to see or correct what we hold about you, and you can withdraw your consent to marketing emails at any time. If our answer does not settle a concern, you can also contact the Office of the Privacy Commissioner of Canada.

The whole site is served over HTTPS, and card details are entered only on Stripe’s payment page, never on ours. No system is perfectly secure. If we ever learn of a breach that affects your information, we will notify you as the law requires.

If what we collect or how we use it changes, we post the new version on this page with a new effective date. A significant change also gets a notice on the site.

Privacy question, or a request to see, correct or delete your information?

Our support inbox is being set up. If you have ordered, reply to the receipt email Stripe sent you; it goes to our support address. Include your order ref.