Your creativity. Your privacy.

This policy covers PNGDesign.art, operated by Art Studio Dandelion. For privacy questions, contact me or email contact@artstudiodandelion.com.

Your account & purchases

I use your email address to send secure sign-in links and recover your account. I keep account identifiers, purchase references, verified payment status and access dates to deliver and protect your paid access.

Supabase provides authentication. Stripe handles payment details on its checkout page; this app does not store full card numbers. Hosting, database and artwork-storage providers help deliver the service. Payment records may need to be retained for accounting, dispute handling and legal obligations.

Operational logs and Sentry error reporting, when enabled, process technical request and error information to diagnose faults and protect the service.

Your designs & photos

Personalized text and photos are used to render your design in the browser. Keep your downloaded files and delivery links safe. I do not send the names or photos you enter in the editor to the landing-page analytics.

Messages & optional emails

When you submit the website message form, I send your name, email and message through Brevo to my support inbox so I can reply. When you choose to open chat, Brevo processes the conversation, browser connection information and contact details you provide. Its offline contact form requests your name and email. Support is separate from newsletter signup.

The optional free-design signup verifies your email using Supabase. When you confirm your newsletter choice while signed in, I save the consent date and wording version, one design credit, and a hash of your email to prevent duplicate gifts. I add your verified email to the Brevo newsletter list for a welcome email and the monthly roundup you request. You can unsubscribe from marketing using the link in any newsletter without losing your chosen design. Support and account messages are handled separately.

Cookies & analytics choices

Essential cookies keep you signed in and support secure access. Optional analytics and advertising measurement run only after you allow them through cookie preferences; choosing essential only does not prevent personalization or downloads. Where enabled, Google Tag Manager and Hotjar help me understand public visits, and the Meta Pixel and Conversions API measure advertising results.

With your permission, ad click and browser identifiers and campaign labels are retained for up to 90 days to connect a visit with checkout. For a verified purchase, Meta may receive the purchase reference, amount, currency, matching identifiers and a SHA-256 hash of the checkout email. Hashing supports matching and does not make the data anonymous. Personalization text, photos, sign-in tokens and payment credentials are excluded. Google purchase events contain the purchase reference, amount, currency and product identifier.

With your analytics permission, Hotjar can measure interactions across the site, including editors, account pages and administrative tools. Personalization, account details and administrative content are masked in recordings. Private delivery links first exchange their token for an essential HttpOnly cookie, so the rendered page URL contains no delivery token. Advertising analytics keep a narrower public-page scope. Brevo support loads when you open it on the contact page. I do not automatically attach your platform identity or purchase credentials to a chat.

Your choices & requests

You can change cookie preferences, unsubscribe from the roundup, and contact me to request access, correction or deletion of your personal information. Some records may need to remain for security, accounting or other legal obligations. I use service providers to operate the app; their processing locations and safeguards depend on their services.