Privacy

posterspin is run by Creative Logic, a business in the Netherlands (KvK 76604357). We decide what happens with your data. Questions: hello@posterspin.com.

We collect as little as we can. You don't need an account. We don't sell data, and we don't use advertising trackers.

When you spin posters

• On your device. The studio keeps your posters, your room and your language choice in your browser's storage. They stay on your device until you order.
• Visitor statistics. We count visits and studio steps with Umami, which runs on our own server in Germany. It uses no cookies and doesn't store your IP address. We see things like the page, the website you came from, your device type and your country. We do this to improve the site (legitimate interest).
• Our server. Netcup hosts our website and order database in Germany. Like any server, it briefly sees your IP address to send you the page.

When you ask for the free postcard

• What we keep: your email address, the poster, the time and your language.
• Bot check. Cloudflare Turnstile checks that you're not a bot. To stop abuse, we count requests per IP address for an hour and per email address for a day, stored scrambled, and then delete the count.
• The email. Brevo sends it for us. We also draw a picture of your poster in a room for the email, kept for 31 days.
• How long: we delete your request after 30 days. It's gone from our backups within 60.
• Offers, only if you tick the box. We keep your email address, the time you agreed and the wording you agreed to, until you unsubscribe. Every offer email has an unsubscribe link.

We use your data to send what you asked for (contract), and send offers only with your consent.

When you buy

• What we keep: your email address, what you bought (including your posters' settings), the amount, the currency, your language and the payment status.
• Payment. Stripe handles the payment. We never see your card or bank details. Stripe also keeps a copy of your posters' settings, so we can restore your order if needed. If you pay in US dollars, pounds or Canadian dollars, Stripe acts as the seller and handles your data under its own privacy policy.
• How long: Dutch tax law requires us to keep order records for 7 years. Your download link works for that long too. You can ask us to switch it off at any time.

We use your data to deliver your order (contract) and to keep tax records (legal obligation).

When you order a printed poster

To print and deliver your poster, we share your name, delivery address, phone number and email address with Prodigi, the company that prints and ships it for us. Prodigi prints in Venlo, in the Netherlands. Its parent companies are in the United Kingdom, which the EU recognises as protecting personal data adequately. Prodigi passes them to the delivery company so the parcel reaches you.

• The phone number and email address are only for the delivery. Prodigi itself doesn't contact you; we send the tracking email.
• The print file itself contains only your poster. We draw it on Cloudflare's servers and keep it for 7 days; Prodigi keeps its copy for 30 days.
• How long: we delete your name, address and phone number 3 months after delivery. We keep the country and the amounts for the tax records.

We use your data to deliver your order (contract).

When you email us

hello@posterspin.com is forwarded by Cloudflare to our Gmail inbox (Google). We keep your emails as long as we need them to help you, and order-related emails for as long as the order.

Who else handles your data

• Netcup: Our server, order database and visitor statistics. Germany.
• Cloudflare: Domain, email forwarding, bot check, backups, drawing print files. Backups and print files in the EU; the company is in the US.
• Brevo: Sending our emails. France; servers in the EU.
• Stripe: Payments. Ireland and the US.
• Prodigi: Printing and shipping printed posters. The Netherlands and the UK.
• Delivery company: Delivering the parcel. Your country.
• Google (Gmail): Our inbox. US.

They may only use your data for us, except Stripe and the delivery company, which are also responsible for their own use. When data goes to the US, the company is certified under the EU-US Data Privacy Framework, or we use the EU's standard contract clauses.

Backups. A copy of our order database is kept in the EU, at Cloudflare. Deleted data disappears from the backups within 30 more days.

Email statistics. Brevo counts whether links in our emails are clicked. It keeps its sending logs for one month.

Your rights

You can ask us to see, correct or delete your data, or to limit what we do with it. You can object to our visitor statistics, and you can take back your consent for offers at any time. You can also ask for your data in a file. Email hello@posterspin.com; we answer within a month. We may have to keep some order data for the tax office.

If you're unhappy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.

Changes

If we change this notice, we put the new version here with its date.