Privacy

Last checked 2026-10-12.

The names, dates and titles you type, and any sound you record or choose, never leave your device. The posters are drawn and the files are made in your own browser. We show no ads and set no tracking cookies.

What stays on your device

• Everything you type: the family lines, the words and clues of a puzzle, the title, the line under it and the look you chose. The poster and the files are drawn by your browser.
• Your sound, for the sound wave poster. Your browser reads the recording or file with its own decoder and keeps only a few hundred loudness numbers, which are what the poster draws. The recording itself is never stored by the site and never sent anywhere; a voice cannot be rebuilt from those numbers. If you give a scan-to-listen link, it is printed as a code in your files and stays on your device; we never fetch it.
• For sellers: your customers’ details. The studio draws on your device like the makers do. The names, dates and recordings you put in for a customer never reach us. Your licence key is kept in your browser’s storage under “ks:seller” until you press “Forget the key on this device”.
• Your order details, while you pay. When you press a buy button, your browser saves what you typed in its own storage (under the names “ks:tree” for a family tree, “ks:wave” for a sound wave, which holds the loudness numbers, the words and the link, and “ks:puzzle” for a crossword or word search), so the download page can make your poster when you come back from the payment page. It stays there until you clear your browser’s data for this site.

What reaches us

• When you buy: your browser sends our server only the product. Never a name, a date or a title. Our server asks Stripe to open a payment page for that product, and later asks Stripe whether it was paid.
• For sellers: your brand line. When you start a licence, the brand line you type is sent to our server and to Stripe, and kept in your subscription’s record there, because it is printed on every file you make and your key carries it. Each time the studio opens, our server checks your key and asks Stripe whether the subscription still stands; it learns nothing else.
• Stripe takes the payment on its own secure page. It asks for your email address for the receipt, and your card or other payment details. We never see your card. In our Stripe account we can see what Stripe shows sellers: the email address, country and amount of each payment and the product. Stripe’s own privacy policy applies to what you give Stripe.
• We count which of our main buttons and which links to other websites are clicked, without cookies. Each count records only the page, what was clicked and when: never who you are, your IP address or your device.
• Our host, Cloudflare, handles the requests your browser makes to load the site, as every web host does.

What we do not do

• No ads and no advertising trackers.
• No accounts and no passwords (a seller’s key is a signed licence, not a login), no newsletter, no selling or sharing of data.
• No names or dates in our server logs, because they never reach our server.

Questions

Email hello@keepsakestudio.app.