PRIVACY NOTICE — CHECKOUT
Your story belongs to you.
What is stored
We store your submitted name and email, recipient name, dedication text, optional country, occasion, reveal-date preference, design/language preferences, price snapshot, payment reference, status, and creation time. These fields support your order and payment verification. Your name, email, amount and reference are sent to Chapa to initialize checkout. Chapa handles payment instruments under its own policies. For live purchases, your email address and certificate are sent through Resend for delivery. Public verification reveals only the star, certificate serial, issue date and validity status.
What stays private
Order details are not published in the registry. A private status link grants access to dedication details and payment status. Keep it confidential. We store a hash of that access token, not its raw value. Keep your private order link confidential; anyone with it can view the dedication details.
Browser storage and cookies
Favorites and language preference are stored locally in your browser. Admin login uses an HTTP-only session cookie. No marketing tracker, advertising pixel, or third-party analytics is installed.
Security and retention
Access is restricted and privileged status changes are audited. Rate-limit keys use hashes and are temporary operational data. Operators must configure backups, an appropriate retention schedule, and a working privacy contact before a public launch. Payment status changes do not automatically erase records or backups.
Your choices
Removal/correction requests can be sent through the configured support contact once operational. Public-display preferences saved now do not authorize publication; explicit confirmation is required later.