What we collect

Canvas & Cage is run by Nexora Unity LLC. This page describes exactly what the site does with your information. It is longer than it used to be because the site does more than it used to; it is still short, because the site still does very little with what it knows.

Browsing

There is no analytics, no advertising pixel and no third-party script on any page of this shop. No cookie is set for tracking, which is why you have not been asked to accept any. Like every website, ours is delivered through servers that see the request your browser sends, including your IP address; our hosting provider and Cloudflare, which sits in front of the site, keep ordinary short-lived server logs for security and to keep the site running. We do not build profiles from them.

Your cart

Your cart is stored in your own browser and is never sent anywhere until you choose to check out. Clearing your browser data clears it, and we cannot see it.

Buying

Payment is handled entirely by Stripe on their own page. Card details are never entered on this site and we never receive them. Stripe passes back your email and the name and shipping address you gave them, and we store those against your order so the parcel can be sent and so we can help if something goes wrong. We also keep Stripe’s reference numbers for the payment, which are not your card number.

We keep the order itself — what was bought, what it cost, where it went, what the lab charged us, and any refund — because business and tax records have to be kept, and because you may need us to look it up later. Your confirmation email contains a private link to your order page; anyone who has that link can see the order, so treat the email as you would a receipt.

Your account, if you make one

An account holds your email address, a password only if you set one (stored as a one-way hash, never as the password itself), any addresses you save, the prints you save to your list, and a link to your orders, the fighters you asked for and the messages you sent while signed in. Signing in sets one cookie, named cc_session, which does nothing but keep you signed in for up to sixty days; it is the only cookie the site sets, and it is not used to track you. A sign-in link expires after fifteen minutes; until then it signs in whoever holds it, so treat it like a password and do not forward it. Expired sessions are deleted.

Email we send

Only email about your dealings with us: an order confirmation, a dispatch note with tracking for each parcel, a note if an order is cancelled, refunded, replaced or running late, one request for a review after a print ships, a sign-in or order-lookup link when you ask for one, and a discount code when you claim one. We do not send marketing email and there is no newsletter. If that ever changes we will ask you first, and every such message will carry a way to stop them.

When you claim a discount code we keep your email address with the code, so the code can be tied to one person and honoured at checkout.

Messages you send us

A message through the contact form is stored with your email address, the topic, the text, and the order it concerns if you attached one, along with our replies, so that whoever picks up the conversation next can see it. If you attach a photograph of a damaged print, the photograph is emailed to us and is not stored on the site; only a note that one was sent is kept.

When you ask for a fighter we do not yet have, we keep the name you typed, which page you asked from, your email if you gave it (or your account’s, if you were signed in), and a salted hash of your IP address to limit abuse of that form. The hash is made with a secret only we hold and is not used to identify you. Requests are used to decide what to make next and to show you, in your account, what you asked for; if you left an email we may write to tell you when the fighter is made.

Reviews

If you write a review, what becomes public is the name you chose to show, the city if you gave one, your star rating, your words, and when it was written; which print it was about is kept with the review and may be shown beside it. Your email address is never shown. Until it is published a review is visible only to us. You can ask us to take it down at any time.

Who else sees it

Each for one job, and nobody else. Stripe, for payment. Prodigi, the print lab that makes your poster — a UK company that prints orders for the United States at its US facility — which receives your name, shipping address and email so it can print and post it. The carrier, for delivery within the United States. Resend, which delivers our email, and so handles your address and the contents of the messages we send you. Railway, which hosts the site and its database, and Cloudflare, which stands in front of it. Nothing is sold, rented or shared for advertising, and we do not share personal information for cross-context behavioural advertising.

Your order is stored on servers in the United States, and your print is made and posted from the lab’s US facility. The person who runs the shop is in Canada, so administering an order is the one point at which your details are looked at from outside the US.

How long we keep things

Orders, payments and refunds: as long as business and tax records must be kept, which is years, not weeks. Your account and what is saved in it: until you ask us to close it. Sign-in sessions: sixty days at most, then deleted. Sign-in links: fifteen minutes. Order-lookup links: thirty minutes. Review invitations: sixty days. Discount codes: a code stops working on the expiry date issued with it, and the code and the address it was issued to stay on record with our promotion records. Messages and our replies: with the order history they belong to. Fighter requests: as a record of what people asked for.

Security

Everything travels over HTTPS. Passwords are stored only as one-way hashes, session tokens only as hashes, and card details never touch us at all. Access to the shop’s admin is by a link emailed to a short list of named addresses. No system is perfect; if we ever learn of a breach affecting your information we will tell you.

Children

The shop is not directed at children and we do not knowingly collect information from anyone under sixteen. If you think a child has given us information, tell us and we will delete it.

Your rights

Wherever you live, you can ask what we hold about you, ask for a copy of it, ask for it to be corrected, and ask for it to be deleted where we are not required to keep it. Residents of California, Colorado, Connecticut, Virginia, Utah and other states with privacy laws have these rights in law; we honour them for everyone. We do not sell personal information and do not share it for targeted advertising, so there is nothing to opt out of on that front, and we will never treat you differently for exercising a right.

To exercise any of them, email [email protected]. We confirm it is you by replying to the address we hold, answer within forty-five days, and if you disagree with our answer you can say so by replying and we will look again. Someone you authorise may ask on your behalf with proof that you asked them to.

Changes

When this page changes, the date at the top changes with it. If a change would mean something materially different for what we do with your information, we email account holders before it takes effect.