Last updated: May 1, 2026
When you place an order, we collect your name, email address, phone number (optional), shipping address, and payment information. Payment details are processed by Stripe and never stored on our servers. When you upload a 3D file, that file is stored securely in our private cloud storage. If you sign up for our newsletter, we store your email address.
We use your information to: fulfill and ship your order, send order confirmation and status updates, respond to support inquiries, send newsletters if you opt in, and improve our service. We do not use your data for targeted advertising. We do not sell, rent, or share your personal information with third parties, except as described in this policy.
We use the following trusted third-party services to operate our business: • Stripe — payment processing (stripe.com/privacy) • Supabase — database and file storage (supabase.com/privacy) • Resend — transactional email (resend.com/privacy) • Shippo — shipping rate calculation (goshippo.com/privacy) • Pirate Ship — shipping label generation (pirateship.com/privacy) • Vercel — website hosting (vercel.com/legal/privacy-policy) Each service has its own privacy policy. We only share the minimum data necessary for each service to function.
3D files you upload are stored in a private Supabase storage bucket. Files are accessed via time-limited signed URLs (1-hour expiry). We retain your files for the duration of your order plus 30 days, after which they are deleted unless you request otherwise. Files are not shared with other customers or third parties.
By placing an order, you agree to receive transactional emails related to your order (confirmation, status updates, shipping notification). These emails are not optional as they are necessary to fulfill your order. Newsletter emails are opt-in only and can be unsubscribed at any time via the link in each email.
If you grant photo consent at checkout, we may photograph your completed print and use it on our website, Instagram (@carson.creation), or Facebook. Your name and order details are not included in promotional photos unless you explicitly give permission. You may revoke consent at any time by emailing us.
We use Google Analytics to understand how visitors use our site. This collects anonymized data about page views and user behavior. We also use PostHog for product analytics. No personally identifiable information is collected through analytics. You can opt out of Google Analytics via browser extensions. We use session cookies for cart state and authentication — these are strictly necessary and cannot be disabled.
We implement industry-standard security measures including SSL/TLS encryption, private storage buckets, and Supabase Row Level Security. Your payment data is never stored on our servers — it goes directly to Stripe. We regularly review our security practices.
You have the right to: access the personal data we hold about you, correct inaccurate data, request deletion of your data (where legally permitted), opt out of newsletter communications at any time, and request a copy of your data. To exercise any of these rights, email us at carsonchristophercreations@gmail.com.
Carson Creations is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our service after changes constitutes acceptance of the updated policy.
Privacy questions or requests: carsonchristophercreations@gmail.com. We will respond within 5 business days.