Legal
Privacy Notice
Your sheet is computed in this tab from a town on our list, and nothing about it leaves your device until you order. Then the choices that draw the print go to our server, and your name, email and address go to the companies that take the payment, print it and deliver it.
Last updated
In your browser: every disc and every phase on the sheet is computed here. On our server, only at checkout: the town's coordinates and zone, the year, the name on the sheet and your colours, to draw the print.
Who is responsible for my data?
PaintedApp, LLC runs Painted Moons and is the controller of the personal data described here. Our mailing address is 1327 SE Tacoma St #394, Portland, OR 97202, United States, and you can write to support@painted.app about anything on this page. We collect little, keep it only as long as it's useful to you or the law requires, and never sell it.
Where is my sheet computed?
In this tab.
The town you pick comes from a list of 418 towns, one for each zone in the IANA time zone database, each with the coordinates and the clock the database gives it. Your browser works out every night's disc and every phase of the year from that position and that clock, and nothing is sent while you choose.
Your choices, meaning the town's coordinates and zone, the year, the name on the sheet, the colours and the shape, live in the page's address so you can bookmark them. Anyone you share that link with sees those choices.
When do you ask where I am?
Only when you press Use My Location.
The browser asks your permission first. The page uses your position in this tab to find the nearest town on the list, tells you how far away that town is, and drops the position. It is never sent to our server and never stored. The sheet is drawn for the town on the list.
What is processed where?
| Where | What |
|---|---|
| In your browser | Finding the town, computing every disc and every phase of the year, and drawing the preview and the rooms. |
| On our server, for a shipping price | The print, its size and the country it's going to. Nothing about you. |
| On our server, at checkout | The town's coordinates, rounded to four decimal places, its zone, the year, the name on the sheet, the colours, the shape, the size and the material, to draw the print file. Never your own position. |
Do you use cookies or analytics?
No.
This site sets no cookies and runs no analytics, advertising pixels or third-party trackers. If that ever changes, this page changes first, and we'll ask before loading anything. Stripe's checkout page is Stripe's own: it may set its own cookies to prevent fraud, under Stripe's privacy policy.
What do you collect when I order?
Only what it takes to make your print and get it to you.
- Your name and shipping address, to print and deliver your order. A Digital File needs no address, so none is asked for.
- Your email address, to send your receipt and to reach you about the order.
- The sheet you set, with the size and material you chose, to draw it and print it.
- Your card details go to Stripe and never to us. We see whether the payment went through, and nothing more.
We use these to carry out the order you placed, and we keep the record because tax and accounting law require it. There are no accounts.
Who else sees it?
Only the companies that make the order happen, and only the part each one needs.
- Stripe takes the payment. It collects your card and billing details directly and holds the record of your order, with the name on the sheet and its year. It also keeps the studio address to send you back to if you leave checkout, and that address carries your choices, the town's coordinates among them.
- Prodigi or Printful, whichever of the two makes your print, prints it and ships it. That lab receives your name, shipping address, email address, the order details and the print file, and when your print ships we get the carrier and tracking number from it and email them on to you.
- Resend sends your receipt, your file and your tracking link. It receives your email address and the message.
- Vercel hosts the site, runs the checkout and stores the print file. Like any web host, it sees your IP address when your browser asks for a page.
The print file, and a small preview of it, are stored on Vercel Blob at an unlisted address made from a fingerprint of your choices, so the same sheet ordered twice is drawn once. It is drawn when you open checkout, so it exists even if you don't go on to pay, and the lab collects it from there to print. Like your order record, nothing deletes it on a clock today; ask us and we'll remove yours.
Some of these companies operate outside your country, including in the United States. We don't share your data with anyone for their own marketing.
Will you email me after I order?
About that order, and nothing else.
Every order gets the emails it needs: the receipt, your file, and for a print, the tracking link when the lab ships it. We send nothing later: no reminders, no anniversaries, no newsletter, and checkout doesn't ask to.
Where is my order kept, and for how long?
In Stripe. We keep no database of our own.
The record of your order, meaning what you bought, your email and the address it went to, lives in Stripe, and the lab that made your print keeps its own record of the job. We keep it for support, for our promise on damaged or wrong prints, and for tax and accounting. Nothing deletes it on a clock today; ask us to delete it and we will, unless the law requires us to keep it.
What are my rights?
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, and we'll act within 30 days. Because there are no accounts, requests come by email: write from the address you ordered with. If you're in the EEA or the UK you also have the right to object to processing, to ask for portability, and to complain to your local data protection authority.
If you're in California or another US state with a privacy law, you have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We don't sell or share personal information, for money or for advertising, so there's nothing to opt out of. We honour Global Privacy Control signals all the same, and we'll never charge you differently for exercising any of these rights.
Children
This shop is for adults. We don't knowingly collect data from anyone under 16. If a child has given us something, write to us and we'll remove it.
Changes
If this notice changes, the date at the top changes with it. The terms of service and the shipping and returns page cover the rest of an order.