Privacy
Policy.

This can include your name, checkout email, personalization details, ride or milestone information, messages you ask us to place in artwork, and a shipping address when a physical product requires delivery.

For paid orders we also keep order totals, product and variant snapshots, payment status and provider identifiers. Full card numbers and card security codes are handled by the payment provider and are not stored by Places We Keep.

We use it to confirm payment, create personalized artwork, provide private previews, process change requests and approvals, send order-access and order-status messages, arrange fulfillment, respond to support needs, protect the service from abuse and maintain operational records.

Stripe is used for payment processing. Resend is used for transactional email. Render-hosted services are used to operate the storefront and Map Generator that creates artwork and secure previews. These providers receive only the information reasonably necessary for their part of the service and process it under their own privacy and security terms.

We do not sell customer personal information to advertisers.

Cart contents may be stored in local browser storage so your selections remain available. Secure order and preview continuity is stored only in session storage for the current browser tab or session. Secure order links contain time-limited access tokens and should not be shared publicly.

Operational logs may record technical request information needed for security, reliability and troubleshooting. We do not intentionally place payment card data in browser storage or application logs.

We use first-party traffic statistics to understand public page visits and referral links shared by creators or other partners. Random browser identifiers are stored locally for up to 30 days to estimate unique browsers, and a visit ends after 30 minutes of inactivity or when a new promotion source is used. We store keyed hashes of these identifiers, public page paths, referral codes, campaign tags, referring website domains and event times. This analytics dataset does not store raw IP addresses, names, emails, personalization details, full referring URLs or private order-link tokens, and is not used for cross-site advertising or session replay.

Traffic reports cover the most recent 90 days; older analytics events are incrementally removed as new traffic arrives. We honor browser Do Not Track and Global Privacy Control signals. Clearing browser storage resets the anonymous browser identifier. Only authenticated store administrators can view traffic reports.

We use access controls, private artwork links, payment-provider separation and other technical safeguards intended to reduce unauthorized access. No online service can guarantee absolute security, so customers should keep secure order links private.

For privacy requests, contact Places We Keep using the contact information provided in your order communications. If you no longer have an order email, use the My Order recovery flow to obtain a fresh secure order link.

When we make a material change, we will update the date shown at the top of this page and, where appropriate, provide additional notice.