YOUR DATA

Privacy policy

Last updated: September 22, 2026

Controller

Hosting

Netlify, Inc. hosts this website. To deliver and protect it, Netlify may process technical connection data such as IP address, requested URL, date and time, browser information and security logs. Our legal basis is Art. 6(1)(f) GDPR: the legitimate interest in providing a secure, functional website. Data may be processed outside the EU/EEA, including in the United States. See Netlify’s privacy policy for its processing and transfer safeguards. We do not set Netlify’s log-retention periods.

Local settings and photo preview

This website does not set its own cookies. Theme preference and bag contents are stored in your browser’s local storage; you can remove them by clearing website data. A photo selected for preview is processed only in your browser. The file and its name are not uploaded by the preview or added to your email inquiry automatically. The preview is deleted when you remove the photo or close the page.

Shopify checkout and production photos

When you continue to Shopify checkout, your selected photos and crop settings are uploaded to private Netlify storage. A randomly secured download link is attached to each Shopify cart line so the photo can be associated with the order. Anyone with this link can download the photo; do not share it. Links expire after 30 days, and an automated daily cleanup removes expired uploads, including abandoned checkouts. Production copies downloaded by us or a print provider may be retained separately as necessary to fulfill the order and handle issues. Shopify receives cart details and processes customer, delivery and payment information within its hosted checkout. We do not receive card numbers. Order processing is based on Art. 6(1)(b) GDPR. See Shopify’s privacy policy. For eligible paid orders, our Netlify integration receives signed order updates from Shopify and automatically prepares and sends the photo artwork, selected product, quantity, customer contact details and delivery address to Printify for fulfillment. Production is released only after our manual review. Processing data and rendered artwork in our integration are removed after 30 days; minimal order identifiers remain to prevent duplicate processing. Printify and its print provider retain their own fulfillment records and production copies separately. See Printify’s privacy policy for its processing and international-transfer information.

Website analytics

We use Cloudflare Web Analytics, provided by Cloudflare, Inc., to understand aggregate page views, visits, popular pages, referrals, devices and countries. According to Cloudflare, this service does not use cookies or cross-site advertising profiles. Your browser loads a script from static.cloudflareinsights.com and sends measurement data to cloudflareinsights.com. Our legal basis is Art. 6(1)(f) GDPR: the legitimate interest in improving this website with privacy-conscious analytics. See Cloudflare’s privacy policy.

Email inquiries

If you email info@puzz-photospuzzle.com, we process your email address, message and any attachments you choose to send to answer your inquiry. Email is hosted by Zoho Mail. Depending on the inquiry, the legal basis is Art. 6(1)(b) or (f) GDPR. Legal retention duties may apply. No payment data is collected by this website.

Your rights

Subject to legal conditions, you may request access, correction, erasure, restriction, data portability and object to processing based on legitimate interests (Arts. 15–21 GDPR). Contact us at the email address above. You may lodge a complaint with a data protection authority, including the North Rhine-Westphalia data protection authority. No automated decision-making under Art. 22 GDPR takes place here.