This Privacy Policy explains what information MazelTovInvite (heimish-invites.sites.tab.bot) collects, why we collect it, who helps us process it, and the choices you have. We keep it simple: we collect only what we need to make and deliver your invitation and to answer your messages.
1. Information we collect
When you order an invitation:
- your full name and phone number, your email address if you give it, and any notes you add;
- the design you chose and all the text you type into it;
- the invitation images made from your text (the preview and the finished JPG, PDF and, if you chose it, animated GIF);
- your order number, price, the date and time, and the payment status.
When you pay by card: you enter your card details on Stripe's secure checkout page, not on our site. We never see or store your card number. Stripe tells us whether the payment went through, the amount paid, a payment reference, and your email address if you did not give us one.
When you use the Contact us box: your email address, your message, the page you sent it from, the date and time, and your IP address and browser type (we keep these to stop spam and abuse).
When you visit the site: like every website, our servers receive your IP address and basic information about your browser and the page you asked for. We use IP addresses for a short time to count requests, so that one connection cannot send too many orders or messages (rate limits). These counters are deleted automatically within about a day.
2. Why we use it
- to make your invitation, deliver your files and show you your order page;
- to take payment and confirm it;
- to contact you about your order, and to answer your messages;
- to prevent fraud, spam and abuse of the site;
- to keep the business and tax records the law requires.
We do not use your information for advertising, and we do not send marketing messages.
3. We never sell your information
We do not sell, rent or trade your personal information. We share it only with the service providers below, and only so they can do their job for us, or when the law requires it.
4. Service providers we use
- Stripe processes card payments on its own secure checkout page, when online payment is turned on. Stripe handles your payment information under its own privacy policy (stripe.com/privacy).
- FormSubmit (formsubmit.co) forwards messages from the Contact us box to our email inbox. It receives your email address and your message.
- Our website hosting provider runs the site and stores the order and message records described above on its servers.
- Google Fonts. Some of the fonts on this site load from Google's servers, so your browser connects to Google, which receives your IP address and browser information (Google's privacy policy: policies.google.com/privacy).
5. Cookies, storage and analytics
- Our site does not set any cookies.
- We do not use analytics, tracking pixels or advertising trackers.
- We use your browser's session storage to remember the text you typed while you design, your latest order link (so the thank-you and download page works), and a one-time order code that stops the same order from being sent twice. Session storage stays on your device and is cleared when you close the browser tab.
- Stripe's checkout page and Google Fonts are run by those companies. Stripe may use cookies on its own checkout page, for example to prevent fraud.
6. How long we keep information
- Orders are kept so you can download your files again, so we can help with questions and refunds, and for our business and tax records. When an order is no longer needed for these reasons, we delete it.
- Contact messages are kept until we have dealt with them, and then we delete them from time to time.
- Rate-limit counters are deleted automatically within about a day.
- Payment records kept by Stripe follow Stripe's own retention rules.
7. Your choices: access, correction and deletion
You can ask us to show you, correct or delete the personal information we hold about you. Write to us through the Contact us box, and include your order number and the email or phone number you used, so we can find your records. We may need to keep some records when the law requires it, for example payment and tax records.
8. Children
This site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, please contact us and we will delete it.
9. Security
The site uses an encrypted (HTTPS) connection, and order pages and downloads are protected by a private link. No website can be 100% secure, but we take reasonable steps to protect your information.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we change the "Last updated" date at the top of this page.
11. Contact
Questions about your privacy? Write to us through the Contact us box at the bottom of any page.
See also our Terms of Service and Refund Policy.