Privacy Policy

Account information. When you register we collect your name, email address, and a password (stored only as a cryptographic hash — we never see or store your plain-text password).

Pre-order and payment information. Payments are processed by Stripe. Your card number never touches our servers; we store only a payment reference (such as a payment intent identifier), the order amount, quantity, and status. Shipping and fulfillment details (such as a tracking number) are stored with your order.

Content you submit. Design artwork, design titles and descriptions, and charity nominations you submit are stored and — if approved — displayed publicly alongside your name.

Voting activity. We record your charity votes (which charity, and when) to enforce the two-votes-per-month rule and to tally results. Individual votes are not displayed publicly.

Referral data. When you visit through a share link (a URL containing ?ref=), we set a browser cookie recording the referrer and the page you were viewing. If you later create an account, we record who referred you.

Technical data. Like most websites, our infrastructure logs basic request data (IP address, browser type, pages requested) for security and reliability. Session cookies keep you signed in.

• To operate your account and authenticate you securely
• To run the conditional pre-order lifecycle: authorizing your payment method, notifying you when a design reaches its 100-order threshold, honoring the 24-hour cancellation window, capturing payment, and shipping your order
• To send transactional email (threshold notices, shipping confirmations) via our email provider
• To display approved designs and credit their designers
• To administer charity nomination, curation, and voting
• To attribute referrals and measure sharing
• To prevent fraud, abuse, and violations of our Terms

We do not sell your personal information, and we do not use it for third-party advertising.

We share information only with the processors that make the Service run:

• Stripe — payment authorization and capture
• Resend — transactional email delivery
• Neon — managed database hosting
• Akamai / Linode Object Storage — hosting of uploaded design artwork
• Fulfillment partners — name and shipping details, only as needed to print and deliver your order

We may also disclose information if required by law, or to protect the rights, safety, and integrity of the Service and its users. If Humanicity is ever involved in a merger or acquisition, user information may transfer as part of that transaction, subject to this policy.

We use a small number of first-party cookies:

• Session cookies — keep you signed in (essential)
• tt_ref — remembers who shared a link with you, for up to 30 days
• tt_ref_return — remembers the page you were viewing so we can return you to it after signup, for up to 24 hours

We do not use third-party advertising or cross-site tracking cookies. You can clear or block cookies in your browser; the Service will still work, though you’ll need to sign in again and referral attribution won’t function.

We keep account data while your account is active. Order and ledger records are retained as required for accounting, tax, and dispute purposes. Cancelled pre-orders remain in your order history. Referral cookies expire automatically as described above. You may request deletion of your account and associated personal data (subject to records we’re legally required to keep) by contacting us.

Passwords are hashed with a modern algorithm, connections are encrypted in transit, payment credentials are held by Stripe rather than by us, and administrative functions are restricted to authorized staff. No system is perfectly secure, but we design so that a breach of any one component exposes as little as possible.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these, contact us at the address below and we’ll respond within the timeframe your local law requires.

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their information. If you believe a child has provided us personal data, contact us and we will delete it.

We’ll post any changes to this policy on this page and update the date above; material changes will be announced by email or site notice. Questions or requests: privacy@humanicity.com. See also our Terms of Service.