Privacy

There are no accounts

You cannot create an account here, because there is nothing to log in to. We store no password, no profile and no browsing history.

We do keep your ORDER, because we cannot make or re-make something we have no record of. You can see everything we hold about it on the order page, using your reference and the email you paid with.

Your cart stays in your browser

The cart is held in your own browser's local storage. Nothing in it reaches us until you press checkout, and clearing your browser data clears it completely.

Payment is handled by Stripe

When you check out you are sent to Stripe's own payment page. Your card number is typed there, not here, and we never receive it. Stripe passes us the email and shipping address you gave them, together with what you ordered, because we need both to make and send your piece.

Stripe's own privacy notice covers what they do with that data: stripe.com/privacy.

Who else touches your order

Three companies receive anything, and no others. Stripe takes the payment and holds the billing and shipping address you typed. Printify makes your piece: it receives your name, delivery address and the finished artwork file, and it routes production to the print provider named on that product page — Fulfill Engine, SwiftPOD, Photograve and the rest. Your address reaches that factory through Printify, never straight from us. Almost every one of them prints in the United States; the plush fleece blanket is printed in Australia. Resend delivers our emails to you and therefore holds your address and the text of those emails. The pages themselves travel to you through Cloudflare, our network carrier — traffic passes through it in transit the way it does through any network edge; the three companies above are the only ones we hand your order details to. One more, when you write to us: our support mailbox runs on Google's mail service, so an email you send us — and anything you attach to it — is received and stored by Google the way any mail to a Gmail address is. If you would rather keep a photograph out of email, use the private upload page from your order confirmation; it stores the photograph on our own server.

Nobody else gets any of it. Nothing is sold, nothing goes to a data broker, and there is no advertising network in this store at all.

High Caliber Line, the supplier approached about the moulded squish toys, receives nothing at all. Those products are not on the store, so no name, no address and no photograph has ever been sent to them.

The photograph you send us

You upload it through a private link tied to your order. It is stored on our own server, outside the public part of the site, and it is not reachable by guessing a web address.

A person in the family looks at it, and an illustrator draws from it. WHAT THE PRODUCTION PARTNER RECEIVES IS THE FINISHED DRAWING, NOT YOUR PHOTOGRAPH — your original never leaves us and is never uploaded to Printify or to any production partner.

We keep it for 180 days after your order is delivered, so that we can re-make the piece if something goes wrong in transit or in the wash. After 180 days it is deleted automatically. Ask us to delete it sooner and we will, that day, and it goes for good — we hold no backup of uploaded photographs, so there is no copy left behind in one.

We never use your photograph, or the drawing made from it, in any marketing, on any social account, or on this site, unless you have told us in writing that we may. We do not ask at checkout, because consent buried in a checkout is not consent.

Photographs that include children

This store is for adults and we do not knowingly collect anything from a child. If a photograph you send happens to include a child, we use it only to draw the dog in it and we will not publish it anywhere, ever, under any circumstances — the same rule we hold to for our own family's children.

If you would rather it did not reach us at all, crop the photograph before you upload it. That is always the safest thing to do with anyone else's face.

Email we send you

We email you about an order you placed: a confirmation, a note when it goes into production, a tracking number, and anything that goes wrong. Those are part of the sale and you cannot unsubscribe from them without cancelling the order.

Marketing is separate and entirely opt-in. Nothing is pre-checked, you have to confirm from a link we email you before you are added to anything at all, and every marketing email carries an unsubscribe link that works in one tap with no login. We say what you are subscribing to before you subscribe.

How long we keep things

Order records — what you bought, the personalization, the delivery address, and the history of what happened to it — for 7 years, under our business recordkeeping policy and to satisfy applicable tax, accounting, payment-dispute and legal obligations.

Uploaded photographs — 180 days after delivery, then deleted.

Mailing-list records — until you unsubscribe, and after that we keep only the fact that you asked us to stop, because that is what stops us adding you again by accident.

Asking us to delete something

Write to us. We will delete an uploaded photograph the day you ask. We will delete a mailing-list record the day you ask.

We cannot delete the order record itself while we are still legally required to hold it, and we will tell you honestly which of the two you are asking about rather than sending a form letter.

Analytics and cookies

There is no third-party analytics on this site. No Google Analytics, no advertising or social tracking pixels, no session recording, no fingerprinting, and nothing about you is sold or handed to a data broker. Nothing on any page of this store loads from another company's server.

We set exactly one cookie, and only if you press checkout: a six-hour token that lets the confirmation page recognise the browser that placed the order, so a forwarded link shows a stranger nothing but the order reference. It carries no name, no email and no advertising identifier.

Stripe's payment page is theirs, not ours, and it sets what it needs to take a card safely. That happens on their domain under their privacy notice.

Children

This store is for adults. We never publish a child's surname, age, school, address, daily schedule, or location — not for the family's own children, and not for anyone else's.

The family's children appear here by first name and in illustration, because this is their family's shop. That is the whole of it, and the sentence above is the rule we hold ourselves to.