DRAFT for owner review. A plain-English starting point adapted from make.turnipink.com's pages, not legal advice and not yet reviewed by a lawyer. Turnip Ink LLC must review it and complete the [bracketed] items before launch, then remove this notice.

Privacy Policy

Last updated: [DATE]

What we collect

• Order details: your name, email address, what you bought, the amount and your country.
• Payment: collected and processed by Stripe. Your card details go to Stripe only; we never receive them.
• Technical logs: the time, page requested, response code and IP address, for security. Logs never contain your email, order key or download links.
• Fraud-prevention and proof-of-delivery records: for every paid order, a tamper-evident record of when and from which IP address, browser and language you ordered; your acceptance of the Terms; the card's brand, last four digits, country and Stripe's fraud-risk result (never the full number); and each time you opened your order page or downloaded a file, with the file's fingerprint and the bytes sent. We use it to detect fraud and as evidence of delivery if a payment is disputed.

No advertising or analytics cookies, and no tracking pixels.

Who it is shared with

• Stripe: payments, fraud screening, receipts and disputes.
• Resend: sends your order email.
• Fly.io: hosts this site and its database (United States), backed up to Tigris storage.

How long we keep it

Paid orders: as long as tax and bookkeeping rules require [OWNER: e.g. 7 years]. Proof-of-delivery records: at least 24 months. Checkouts that were never paid: deleted after 30 days.

Children

This site is for parents and teachers. We do not knowingly collect information from children.

Contact

[SUPPORT EMAIL] to see, correct or delete your information.