Privacy Policy

StickerThis Printing (o/a “Puzzl’d”)

Last updated: 28 May 2025

StickerThis Printing (“we,” “our,” or “us”) respects your privacy. This Policy explains how we collect, use, disclose, and safeguard your personal information when you upload images, purchase puzzles, or otherwise interact with our services. It applies to customers located in Canada and the United States only.

1 Information We Collect

Category	Examples	Source	Purpose
Account & Contact	Email, name	Direct	Order confirmation, support, marketing (opt-in)
Order & Payment	Stripe payment intent ID, amount, currency	Stripe APIs	Transaction processing, fraud prevention
Images	Original photo; stylized illustration URL; generation metadata	Direct / OpenAI	Puzzle creation, product support
Shipping	Address, phone (optional)	Direct	Fulfillment, carrier delivery
Device & Usage	IP, browser, analytics data	Cookies & logs	Site security, improvements

2 How We Use Your Information

Perform and manage your purchase contract (order intake, payment, fulfillment).
Provide customer service and technical support.
Improve products and machine-learning workflows (in aggregate, de-identified form).
Send transactional emails; send marketing only with your express consent.
Detect, investigate, and prevent fraud or security incidents.
Comply with legal obligations (tax, accounting, etc.).

3 Legal Bases

Jurisdiction	Law	Legal basis
Canada	PIPEDA & provincial equivalents	Performance of a contract; consent; legitimate interests
United States	State privacy laws (e.g., CCPA/CPRA)	Performance of a contract; consent; legitimate interests

4 Sharing & Disclosure

We never sell your personal information. We share only as needed:

Recipient	Role	Safeguards
OpenAI	Image conversion (gpt-image-1)	Contractual confidentiality & security
Supabase	Database & object storage	US DCs; encrypted at rest/in transit
Stripe	Payment processing	PCI-DSS compliant
Printify	Puzzle manufacturing	Receives illustration + shipping info only
Carriers	Order delivery	Address/contact only
Legal authorities	Regulatory compliance	As required or permitted by law

5 International Transfers

Your data may be processed in the United States by our service providers. We rely on contractual safeguards and encryption to ensure comparable protection.

6 Data Retention

Stylized illustration & order records: six years after your last purchase.
Original photo: deleted 30 days after puzzle ships.
Marketing lists: until you unsubscribe.
Analytics logs: 24 months, then aggregated.

7 Security

We apply HTTPS, AES-256 encryption at rest, least-privilege access, vulnerability scanning, and Stripe-handled card data. No method is 100 % secure—use strong, unique credentials.

8 Your Rights & Choices

Canadian residents may access, correct, or delete their data. U.S. residents (e.g., California) may know, access, delete, or opt-out of targeted advertising. Email support@puzzld.me to exercise rights; we will verify your identity.

9 Children

The service is not directed at children under 13. If you believe a child provided data, contact us for deletion.

10 Cookies & Analytics

We use essential cookies for sessions/Stripe and Vercel for anonymous analytics. Adjust preferences via our banner.

11 Changes to This Policy

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

12 Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at support@puzzld.me