Privacy policy

Your designs and browser storage

Editing and previewing a stamp happens in your browser. Your current draft, including any uploaded logo, is saved in this browser’s local storage. It is sent to our server when you save a design to your account or start checkout. Starting checkout creates an order record containing a fixed copy of the design, even if you do not finish payment.

Local storage also keeps a recent order reference so you can find your order again. Clearing site storage removes the local draft and reference. Saved account designs and server order records are separate and are not removed by clearing browser storage.

Drafts and guest order access created on our previous website stay in that browser’s storage for the previous address. Use Older orders & drafts to return to them; the new domain cannot read those browser records automatically.

Accounts and Google sign-in

An account lets you save designs and access purchases associated with that account. For email sign-up, we store your name, email address and a password hash, along with account identifiers and creation and update dates.

Google sign-in is optional. It requests the openid, email and profile permissions to identify you and create or sign you into your StampLoom account. We receive your Google account identifier, name, email address, email verification status and profile picture URL when provided. We do not receive your Google password or request access to Gmail, Google Drive or Google Calendar.

Our server stores the Google account connection and authentication information returned by Google. This can include access tokens, refresh tokens and ID tokens, their expiry dates and permission scopes. These records support account authentication; they are not stored in your stamp draft. Google and email/password accounts are not automatically merged based on matching email addresses.

StampLoom’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google account information for the sign-in, saved-design and account purchase features described here.

Sessions, cookies and order access

Essential cookies keep you signed in, complete sign-in securely and prove ownership of guest purchases. Authentication records can include your IP address, browser user agent, session identifiers and expiry dates. We also keep rate-limit and security records to reduce abuse.

An order link alone does not authorize a download. Access is checked against the purchasing account or an ownership cookie in the browser that started checkout. Clearing cookies can remove access to a guest order; contact us if you need help recovering a purchase.

Payments

Stripe handles payment details on its hosted checkout page. StampLoom does not collect or store your full card number or card security code. We send Stripe the product, price and order reference, plus your account email if you are signed in when you start checkout.

We keep the purchased design, selected export plan, amount, currency, payment status and Stripe payment references. Stripe sends payment, refund and dispute updates so we can manage download access and purchase support.

Optional website analytics

If you choose “Accept analytics”, we load Google Analytics on stamploom.com to understand visits to our public pages. Before you accept, or if you reject, we do not load the analytics service or send it visit measurements. Editing, accounts and purchases work with either choice.

Analytics receives the public page address and title, the referring website’s origin, and technical information such as browser, device and approximate location. Google receives network information needed to process those requests. We remove URL queries and fragments and do not send stamp text, uploaded logos, account names, emails, order references or payment details. We do not enable advertising personalization, Google signals or automatic form, search, outbound-link and download tracking.

Google Analytics cookies distinguish visits and expire after 180 days without renewal. We remember your analytics choice in this browser’s local storage. Use “Cookie settings” at the bottom of any page to change your choice. Rejecting stops further analytics measurements and removes accessible Google Analytics cookies; it does not erase measurements already received by Google. Learn more about how Google uses information from sites that use its services.

Terms acceptance records

When you save a design to your account or start checkout, we record the accepted policy version, language and server-recorded acceptance time with that design or order. Updating a saved design keeps its latest acceptance record; deleting that saved design also deletes those fields. Order acceptance records follow the existing order-retention and support process described below. Earlier records are not given a retrospective acceptance.

These records help document the notice accepted for that action and handle purchase or misuse questions. We do not collect an additional IP address or browser user agent for this acceptance record. It is separate from your optional analytics choice. Requests to access or delete these records are reviewed through the privacy-contact process below; there is no new automatic deletion period.

Service providers and support

Cloudflare hosts the site and stores account, design and order records in its D1 database. It processes network and request metadata needed to deliver and secure the service. Google processes Google sign-in and, when you accept it, website analytics. Stripe processes checkout and payments. These providers receive the information needed for their respective roles.

If you email support, we receive the contact details, message and attachments you choose to send and use them to respond to your request. Avoid including passwords, full card details or information that is not needed for support.

Your choices and deletion requests

You can remove a saved design from “My designs” and clear your browser’s site data to remove local drafts. You can also revoke Google access through your Google Account connections. Revoking Google access does not automatically delete your StampLoom account, saved designs or order records.

Account and order records are kept to operate the service and support purchase recovery. To request access, correction or deletion of your information, email admin@labcat.ai. Include your account email or order reference so we can locate the records and verify ownership. We review requests individually and explain any information that needs to be retained for payment, security or legal reasons. There is no automatic account-deletion tool at present.

Updates and contact

We will update this page when the service’s data practices change. The date above identifies the latest version. Privacy questions can be sent to admin@labcat.ai.