Privacy Policy

This policy describes what nyArt collects, why, and the choices you have.

What we collect

• Account data - when you sign in with Google, Apple, Facebook, or Amazon we receive your name, email address, and profile picture from that provider. We never see your password.
• Order data - items purchased, shipping address, and contact email, kept as the record of your order.
• Payment data - handled entirely by Stripe; card numbers never touch our servers.
• Preferences - favorites, cart contents, and theme choice, stored against your account or an anonymous guest identifier.

How we use it

To produce and deliver your orders (we share the recipient name, address, and print files with one or more third party partners), to send transactional email about your orders, and to respond to support requests. We do not sell personal data, and we do not send marketing email without separate consent.

The website assistant

If you use the "Ask us" AI assistant, your messages and its answers are processed by an AI service (Google Gemini) to answer you, and kept for 30 days so we can improve our answers; then they are deleted automatically. Conversations are linked only to an anonymous browser identifier - please don't share personal details in the chat. For anything about a specific order, use Find your order or the Support page.

Google Customer Reviews

After you place an order, Google may offer you a short survey about your purchase. It is optional. To show the offer, the order confirmation page passes your email address, order number, delivery country and estimated delivery date to Google; only if you opt in does Google email you the survey after your order should have arrived. The offer is shown by Google, which may use its own cookies for it, and Google handles your answers under its own privacy policy.

Server logs

Like every website, our servers record technical details of each request - the page requested, the time, your IP address and browser type. These logs are kept for about 30 days and are used only for security (spotting abuse and errors) and to count visits in aggregate; we don't use them to identify or profile you, and we don't run outside analytics or advertising trackers.

How the shop is used

To see where the shop is hard to use and to catch errors, we keep our own anonymous record of each visit: the pages viewed, steps such as adding to the cart or going to checkout, the kind of device, the site you came from, and any error the page met. It is linked only to a random identifier in a cookie - not to your name, email address or IP address - and is deleted automatically after 30 days. We may use an AI service (Google Gemini) to summarise these anonymous records for us. No outside analytics or advertising service is used.

Cookies

We use first-party cookies only: session sign-in, an anonymous guest identifier (cart & favorites), CSRF protection, your light/dark theme preference, anonymous visit identifiers (see "How the shop is used"), and an anonymous chat identifier if you use the assistant. No third-party advertising trackers. The one exception is Google's survey offer on the order confirmation page (see Google Customer Reviews above).

Retention & your rights

Order records are retained as required for tax and accounting. You can request a copy or deletion of your personal data at any time via the Support page - deletion requests are honored within 30 days, except records we're legally required to keep.

Last updated October 2026.