Privacy Policy
Last updated: {DATE}
1. About this policy
This policy explains how EVERY1MAKER (every1maker.com, "we", "us") collects and uses personal data. We are the "controller" of the personal data described here. Who we are and how to contact us: see section 11.
2. What we collect and why
| Data | When | Why (lawful basis) |
|---|---|---|
| Email address, password (stored only as a secure hash), email-verified date, date you accepted the Terms | You create an account | To run your account (contract) |
| Google account ID (if you sign in with Google) | You use "Sign in with Google" | To let you sign in (contract). We don't keep your Google access tokens |
| Sign-in date | Each sign-in | Security and to know if an account is inactive (legitimate interests) |
| Design details you enter — e.g. names, text, colours and, for pet tags, a phone number | You unlock a design | To generate your file and let you download it again (contract) |
| Credits balance and history; download history | You use Credits or download | To run your account (contract) |
| Purchase records: plan, amount, currency, the billing country you choose and the billing country from checkout, Stripe/Onelink reference numbers, refunds and disputes | You buy something | To provide what you bought, meet tax and accounting duties (legal obligation) and handle refunds, disputes and fraud (legitimate interests) |
| IP address and a hashed sign-in key | You sign in, sign up or reset a password | To stop abuse and brute-force attacks (legitimate interests). Kept 24 hours |
| Emails you send us | You contact us | To reply (legitimate interests) |
We don't store your card details — payments are handled by Onelink (section 4). We don't use analytics, advertising or tracking tools, and we don't sell your data.
3. How long we keep it
| Data | How long |
|---|---|
| Your account (email, sign-in details, Credits, downloads) | Until you delete your account, or after 7 years without activity (sign-in, download or purchase) and no active plan |
| Design details (incl. pet-tag phone numbers) | Deleted 30 days after the 3-month re-download period ends |
| Email verification / password reset links | Deleted once expired |
| IP-based security records | 24 hours |
| Purchase, subscription, refund and dispute records | 7 years (tax and accounting). If you delete your account, these are kept without your email address |
| Emails with us | As long as needed to deal with your request |
4. Who we share it with
We use these providers to run the service. They only use your data as needed to provide their service:
- Onelink / Stripe — payments. When you request a refund, we use your purchase record to process it. Onelink acts as the merchant of record and is a separate controller for payment data (card details, billing address, receipts, tax). See their privacy policy linked at checkout. When you delete your account we also ask Stripe to delete your customer record; Stripe may keep some data where the law requires.
- Neon — our database (hosted in Frankfurt, Germany (EU)).
- Resend — sends account emails (verification and password reset).
- Google — only if you choose "Sign in with Google".
- Render — hosts the website. Server logs may include IP addresses and are kept for 7 days.
Some providers are based in, or may access data from, the United States or other countries. Where data leaves the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum used by these providers.
We may also share data if the law requires it, or to protect our rights (for example in a payment dispute).
5. Your rights
You can ask us to:
- give you a copy of your data;
- correct it (for example change your email);
- delete it — you can also delete your account yourself on the Account page;
- restrict or object to some uses;
- transfer data you gave us to you or another service.
Email hello@every1maker.com. We'll reply within one month. Some data (purchase records) must be kept for the legal period above even after a deletion request.
6. Cookies and local storage
We only use what is strictly necessary to run the site:
- sign-in session cookies (keep you logged in for up to 30 days) and security cookies;
- for Google sign-in, short-lived security cookies;
- your browser's local storage, to remember a design you were making while you sign in (cleared after download, on log out, or after 24 hours).
We don't use advertising or analytics cookies, so we don't show a cookie banner.
7. Children
Our service is not intended for children. You must be 18 or older to create an account.
8. Security
Passwords are stored as secure hashes, connections are encrypted, and access to our systems is restricted. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
9. Complaints
Please contact us first. You can also complain to the UK Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113.
10. Changes
We'll update this page when things change and show the date at the top. For important changes we'll also tell you by email or on the website.
11. Who we are and how to contact us
EVERY1MAKER (every1maker.com) is the trading name of Tsz Ying Ngan, a sole trader based in the United Kingdom.
Business address: {BUSINESS ADDRESS} · Email: hello@every1maker.com · ICO registration number: {ICO NUMBER}
Full details are on our Legal Notice.