Privacy Policy

CartaCraft (cartacraft.xyz) is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

Order data: When you place an order we collect your email address, the poster configuration you designed, and the total amount paid. We do not collect your name or physical address (this is a digital-only product).

Payment data: Payment is processed by Lemon Squeezy. CartaCraft never sees or stores your card number or payment credentials.

Map usage: The map editor uses Mapbox to render maps and process location searches. Mapbox may collect usage data per their own privacy policy.

Technical data: Our hosting infrastructure may log standard request metadata (IP address, browser type, timestamp) for security and debugging purposes. These logs are not used for tracking or marketing.

2. How We Use Your Data

We use your email address solely to deliver your purchased PDF poster and to respond to support requests. We do not send marketing emails. We do not sell or share your data with third parties except as necessary to fulfil your order (payment processor, email delivery service, file storage).

3. Data Retention

Order records are retained for a minimum of 3 years for accounting and legal compliance purposes. PDF files stored on our servers expire and are automatically deleted after 30 days. You may request deletion of your email address and order data at any time by contacting us.

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Lemon Squeezy — payment processing

Mapbox — map rendering and geocoding

Resend — transactional email delivery

Amazon Web Services (S3) — secure file storage

Supabase — database hosting

5. Cookies

CartaCraft does not use tracking or advertising cookies. We use only essential session storage in your browser to maintain your poster configuration and cart state during your visit.

6. Your Rights

You have the right to request access to, correction of, or deletion of any personal data we hold about you. To exercise these rights, email support@cartacraft.xyz.

7. Changes to This Policy

We may update this policy as our practices evolve. Material changes will be noted with an updated date at the top of this page.

8. Contact

For privacy-related questions, contact us at support@cartacraft.xyz.