Privacy policy
Last updated: May 12, 2026
We're a small US-based 3D-printing studio. We collect only what we need to fulfill your order, never sell your data to third parties, and give you full control to access, correct, or delete what we hold. This page is written in plain English — no legalese, no dark patterns.
What we collect
- Contact information — name, email, phone, shipping address, and any message text you submit through our contact form or checkout.
- Order data — products ordered, custom 3D files you upload for quoting, quoted prices, payment confirmations.
- Payment info — handled directly by our payment processors (Stripe and PayPal). We do not store full card numbers on our servers.
- Technical data — IP address, browser type, pages visited, and limited interaction data used by Google reCAPTCHA to score traffic and block bots.
Cookies & local storage
- Cart contents — saved in your browser's localStorage so your cart survives a refresh. Never sent to us unless you check out.
- Shipping address — remembered locally to speed up your next checkout.
- Login session — a JWT token in localStorage that keeps you signed in. Cleared on logout.
- Google reCAPTCHA — Google places cookies on your browser to detect bot behavior on the contact form. Subject to Google's Privacy Policy.
Third-party services we share data with
We only share what each service strictly needs to do its job:
- Stripe — card payments. (policy)
- PayPal — alternative payments. (policy)
- Shippo — to fetch live shipping rates and generate labels. (policy)
- USPS / UPS / FedEx / DHL — to physically deliver your package. They receive your shipping address only.
- SendGrid — to send order confirmation and shipping emails. (policy)
- Twilio — to send SMS order updates if you provide a phone number.
- Google reCAPTCHA — bot protection on the contact form.
How we protect your data
- All traffic is encrypted over HTTPS / TLS.
- Passwords are hashed (never stored in plain text). Sessions use signed tokens with expiration.
- Payment details never touch our servers — they go directly to Stripe / PayPal.
- Only authorized staff can access order data, and only the minimum needed to fulfill an order.
Your rights
- Ask us what personal data we have about you, and we'll send you a copy.
- Ask us to correct anything inaccurate.
- Ask us to delete your data (subject to legal record-keeping requirements such as tax records for completed orders).
- Opt out of SMS by replying
STOPto any message. - Unsubscribe from marketing emails using the link at the bottom of any marketing email. (Transactional emails like order confirmations are required to ship your order and can't be opted out of without cancelling the order.)
Contact us about privacy
Questions or requests about your personal data? Email support@palmcustomstudios.com or use the contact form. We respond within 30 days.
This policy is provided for transparency. It is not legal advice. If you operate a similar business and want to reuse this language, please consult a lawyer.