Privacy.
Last updated 6 October 2026. This page describes the personal data this site handles.
What we keep
Your email address, used to sign you in with a one-time code and to deliver what you buy. Your orders: what was bought, when, the amount, the Stripe identifiers of the payment, and the box you ticked at checkout asking for your files right away, with the minute you pressed Checkout. Your downloads: which file, from which order, and when. Messages you send through the contact form, with the address you gave and any times you suggest for a call. If you join the email list: your address, when you joined, the page you joined from and the words the form showed you, to send you the occasional email it describes. If you apply for the NGO and public education price: the organisation's name, type, country, website and register entry, and our decision. Questions you ask the chat, the charts it draws and what you do with them, such as downloads and links followed, are kept for 180 days with a salted hash of your IP address. A cookie counts the 2 questions you can ask without an account. Once you sign in, your questions are linked to your account. The data in the reports themselves is about products, not people.
What we do not keep
Card details never reach us; Stripe handles payment. There are no advertising trackers on this site, and nothing here profiles you or follows you to another site. The one script on the site that is not ours is the Website Carbon badge in the footer, which measures the page and not the reader. Server logs hold the usual request records for a short time to keep the site running.
Who processes it
Vercel hosts the site. Supabase stores the account, order and message records, the email list and the report files, in the European Union. Stripe processes payments and issues receipts. Resend sends the sign-in codes, the emails about your orders and applications, and contact notifications. Anthropic, through Vercel's AI Gateway, receives the text of each question asked in the chat, to pick the chart that answers it. Plausible receives anonymous counts of the charts the chat draws and of its refusals, never the text of a question. For these counts, Plausible also receives the browser and network address from the chat request to recognise a visitor, but does not store either value. Wholegrain Digital, through the Website Carbon badge in the footer, receives the address of the page you opened and nothing else, to estimate what one view of it transfers. The badge keeps its answer in your browser so it asks once a day rather than once a view, it is not loaded on your account or checkout pages, and nothing it returns reaches us.
How long
Account and order records are kept while the account exists and for as long as tax rules require the sales record. An application for the NGO and public education price and its decision are kept while the account exists. Contact messages are kept until answered and for a reasonable period after. An address on the email list is kept until you ask to leave it. Sign-in codes expire within minutes.
Your rights
You can ask to see, correct or delete the personal data we hold about you, to have your account closed, and to leave the email list, by writing to support@apparelsignals.com.