Privacy Policy

What we collect

Your account email and creator display name; billing details, which Stripe handles; the logos and watermark settings you save; and, for each stamp you register, a registry record made up of the stamp date, your creator name, perceptual hashes of the stamped image and, when the stamp added a label or mark, of your original upload, and the signed provenance record. To stamp or check an image you upload it to us. If you join a product waitlist, we keep your email address, the page you joined from and the date you joined, and use them only to send a confirmation when you join and one email when that product opens. How long each of these is kept is set out below.

How long we keep it

• Images you upload to stamp are deleted as soon as processing ends, whether the stamp succeeds or fails. An upload that never reaches processing is deleted within 1 hour.
• Signed images are deleted as soon as the signed provenance record is saved to the registry. If that record could not be saved, the signed image is deleted within 30 days.
• Images you upload on a verification page to check a stamp are deleted right after the check, and within 1 hour at most.
• The perceptual hashes and the signed provenance record are kept for as long as your account exists, so anyone can verify your stamps. None of them can be used to recreate your image. The rest of the registry record (stamp date and creator name) is kept with them.
• Logos you upload are kept until you delete them.
• Waitlist email addresses are deleted within 30 days after the announcement email for that product is sent, or sooner if you ask us to remove yours.

What we do not do

We do not train machine learning models on your images. We do not sell your data. We share your images only with the providers that run the service: Supabase stores them while they are processed, and Modal runs the watermarking and signing.

Cookies and sessions

We use your browser's local storage to keep you signed in for up to 30 days, to count your free stamps, and to remember the watermark text you last used. We count page visits with Vercel Web Analytics, which sets no cookies and records only which page was visited, the referring site, and the country and type of device, never who you are. We do not use advertising trackers or cross-site tracking.

Subprocessors

• Supabase: database, authentication, and storage. Data resides in the United States.
• Modal: runs the invisible watermark and C2PA signing on images you stamp.
• Stripe: payment processing. We never see your card details.
• Resend: transactional email delivery (sign-in links, receipts, and waitlist confirmation and announcement emails).
• Vercel: hosting, edge compute, and cookie-free page view counts (Vercel Web Analytics).
• Cloudflare Turnstile: bot check on the sign-in page.
• Google Fonts: web fonts, loaded from Google's servers.

Your rights

You can request deletion of your account and associated data by emailing christine@wildthistlemoon.com. We will action the request within 30 days. Deleting your account deletes your registry records, so your stamps can no longer be verified.

Contact

Questions about this policy: christine@wildthistlemoon.com.