Privacy policy
Last updated 7 November 2026
We collect only what we need to make your papercraft, keep it for as short a time as we can, and never sell it.
What we collect and why
- Your pet's photos
- To design your papercraft.
- Your pet's name, dog or cat, size, collar choices and notes
- To make the papercraft you asked for.
- Your email address
- To send you your PDF and to answer you if something goes wrong.
- Payment details
- Handled entirely by Stripe. We only receive the amount, the payment status and your country, never your card details.
- Emails you send us
- To help you.
We use this information to deliver what you bought (the contract between us), to keep the accounting records the law requires, and to keep the shop secure. We don't use your data for advertising, we don't sell it, and we don't use tracking or analytics cookies.
How long we keep it
- Your photos and your PDF are deleted automatically 30 days after your order.
- Order details (email, pet name and choices) are deleted automatically after 12 months.
- Payment and invoicing records are kept for as long as Portuguese tax law requires (currently up to 10 years).
Who helps us
We use a few trusted services to run the shop. They only process your data on our behalf and under contracts that protect it:
- Vercel
- Hosts the website and stores your photos and PDF (data stored in Frankfurt, Germany).
- Upstash
- Stores order details (Frankfurt, Germany).
- Stripe
- Processes payments.
- OpenAI
- Image tools that help paint your papercraft from your photos. Photos sent through OpenAI's business service are not used to train their models.
- Resend
- Sends your order email.
- Our email inbox (Gmail), and the fonts used on this website.
Some of these companies are based in the United States. Where data leaves the EU, it is protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Cookies
This website does not set its own cookies. Stripe sets cookies on its payment page to prevent fraud.
We count visits anonymously, without cookies, using Vercel Web Analytics and our own simple counter. Each visitor is counted with a code that changes every day, so we can't identify you or follow you from one day to the next. We only see totals, such as how many people visited, which pages they opened, which site sent them and their country.
Your rights
You can ask us at any time to see, correct or delete your data, to receive a copy of it, or to object to how we use it. Just reply to your order email and we will answer within 30 days. If you think we have not handled your data properly, you can complain to the Portuguese data protection authority, CNPD (cnpd.pt).
Children
Orders must be placed by someone aged 16 or over.
Changes
If we change this policy, we will update it here and change the date at the top.