Privacy policy

Last updated: September 12, 2026

The short version

• We do not require an account and we never ask for payment details. Purchases happen on the partner store’s site under their policies.
• We run our own anonymous analytics so we can see which designs are popular. No advertising trackers, no data brokers.
• We never sell, rent or share personal information.

What we collect

When you visit, our servers record the page you viewed, your search term (if any), the outbound store link you clicked, a coarse device type (mobile/desktop), and your country. We set one first-party cookie containing a random identifier so we can count visitors and connect a click to a later purchase report from a partner store.

We do not store your IP address. It is combined with your browser’s user-agent string and a secret that changes daily, then irreversibly hashed. The result cannot be turned back into an IP address or used to follow you across days.

Partner stores

When you click through to Etsy, Amazon, TeePublic or another store, that store becomes responsible for your data under its own privacy policy. Some partners report back to us that a sale occurred and its value, together with the anonymous click identifier. We do not receive your name, address or payment details.

Where data lives

Data is stored in a Supabase (PostgreSQL) database with row-level security, encrypted at rest and in transit, and served through Vercel and Cloudflare. Raw event records are automatically deleted after 400 days; only aggregate statistics are kept.

Your choices

You can block or clear our cookie at any time in your browser; the site keeps working. To ask about data we may hold, email us via the contact page.