Privacy Policy

KomiArts operates KomiArts. For privacy requests, use hello@komiarts.shop. We publish only approved business-facing details and do not expose a private owner email, phone number, personal legal name, or residential address.

• Account: verified email, account identifier, email-verification time, optional versioned password hash, and session-revocation version.
• Orders: email, recipient and shipping address, safe public reference, items, financial breakdown, Stripe/Printify identifiers, shipment tracking, refunds, disputes, and status.
• Shopping: opaque server cart ID, cart lines/revision, Checkout draft, and purchased-allocation lineage.
• Newsletter: email, consent time/version/source, suppression lifecycle, opaque unsubscribe ID, and welcome-offer lifecycle.
• Security/operations: HMAC-derived IP subjects for bounded rate limits, webhook/outbox receipts, incidents, and minimal service logs.
• Browser: theme choice in local storage. The offer dialog uses in-memory page state. Consent-aware attribution/analytics remains disabled until the visitor chooses it.

We use data to provide the cart and account, validate and fulfill purchases, prevent duplicate or fraudulent activity, send requested account/order messages, maintain suppression choices, provide support, reconcile payments/refunds, meet legal/accounting obligations, and improve the store only where consent or another valid basis applies.

Cloudflare hosts the Worker and images; Upstash stores application records; Stripe hosts payment Checkout and processes payments/tax configuration; Printify produces and ships paid orders; Resend delivers account, order, and consented marketing email; Auth.js coordinates authentication. Each receives only the data needed for its role and applies its own terms and privacy practices.

Essential HttpOnly cookies hold an opaque cart ID, authentication state, and a short-lived Checkout-return capability. Theme preference uses local storage. Nonessential analytics and attribution storage/requests are not activated before consent. You can reject nonessential analytics without losing shopping, authentication, or Checkout.

Automated order-PII redaction remains fail-closed until a qualified reviewer approves the accounting, tax, chargeback, legal-hold, and backup period. Account access can still be deleted immediately; a tombstone prevents older backups from resurrecting access.

Checkout and security capabilities expire and are not extended on restore. Encrypted primary-data backups preserve original absolute expiries, use a separate destination/key identifier, apply deletion tombstones first, and are restore-tested in an isolated database once external backup configuration is enabled.

Signed-in users can download a JSON export, manage newsletter consent, and delete account access. A verified-email account can also surface guest orders made with that email. For another guest request, contact us; we will verify control of the order email before disclosing or changing personal data.

Every marketing email includes one-click and page-confirmed unsubscribe controls. Minimal suppression information remains so an old backup or future signup does not silently undo a complaint, bounce, or opt-out.

Hosted Checkout keeps card details out of this application. Webhooks are signature-verified, passwords require verified email ownership and versioned PBKDF2 parameters, request bodies are bounded, and sensitive return details require a nonce or matching account. No system is risk-free; contact us if you believe an account or order is exposed.

The store is not directed to children under 13, and we do not knowingly ask a child under 13 to create an account or join marketing. A parent or guardian can contact us about removal.

We update the effective date when this policy changes materially. Contact hello@komiarts.shop or use the contact page.