Privacy Policy

This Privacy Policy describes how Samuel Finkel LLC ("we," "us," or "our") collects, uses, and protects your information when you use MemoryMaker (the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

We collect the following types of information:

Information you provide directly:

• Photographs and images you upload to create your memory game
• Shipping address and recipient name for order delivery
• Your email address and phone number for order communications
• Gift messages you choose to include with your order

Information collected automatically:

• IP address (used for rate limiting and abuse prevention only)
• Basic browser/device information transmitted via standard HTTP headers

We do not use cookies for tracking, advertising, or analytics. We do not use any third-party analytics services.

2. How We Use Your Information

Your information is used solely to:

• Process and fulfill your order (resize images, transmit to print partner, arrange delivery)
• Communicate with you about your order status
• Process payment through our payment provider (Stripe)
• Prevent abuse and maintain security of the Service

We do not sell, rent, share, or use your personal information or photographs for marketing, advertising, machine learning training, or any purpose other than fulfilling your order.

3. Your Photographs

Your photos are the most sensitive data we handle. Here is exactly what happens to them:

• Photos are uploaded to secure cloud storage (Vercel Blob) for order processing
• EXIF metadata (GPS location, camera info, timestamps) is automatically stripped from non-PNG images during upload
• Photos are resized to print specifications and transmitted to our third-party print partner for fulfillment
• Photos are stored only as long as needed to complete your order
• We do not browse, review, or use your photos for any purpose other than printing your game

While we take reasonable measures to protect your photos, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of uploaded content.

4. Third-Party Services

We use the following third-party services to operate:

• Stripe — Payment processing. Stripe collects and processes your payment information directly. We never see or store your credit card number. See Stripe's Privacy Policy.
• Vercel — Hosting and cloud storage for uploaded images. See Vercel's Privacy Policy.
• Third-party print partner — Receives your images and shipping address to manufacture and ship your game. Your data is shared with our print partner solely for order fulfillment.

5. Data Retention

We retain your order data (shipping address, email, order details, and uploaded images) for as long as reasonably necessary to fulfill your order, handle any post-delivery issues, and comply with legal obligations. We do not maintain long-term archives of your photographs beyond what is needed for order processing.

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Automatic stripping of EXIF metadata from uploaded images
• Unique, unguessable URLs for stored files
• Rate limiting and input validation on all endpoints
• Password-protected administrative access

Despite these measures, no system is completely secure. We cannot guarantee that unauthorized access, data loss, or breaches will never occur.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it. Note that family photographs depicting children as part of a memory game order are uploaded by the adult account holder and are governed by these Terms.

8. Your Rights

You have the right to:

• Request access to the personal data we hold about you
• Request deletion of your personal data and uploaded photographs
• Request correction of inaccurate personal data

To exercise any of these rights, please contact us at the email below. We will respond to requests within 30 days.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell personal information. To exercise your rights, contact us at the email below.

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at samuelfinkel7247@gmail.com.