MVP review draft · Not approved for live selling
Privacy Policy · MVP draft
What is stored
During the ceremony, photos and answers stay in your browser. When you start checkout, we save your original pet photos, answers, ceremony result and email privately so we can fulfill the order. Please upload only images you have permission to use.
Who can access your photos
Order photos are available only to the signed-in operator. Final portraits and certificates use private, unlisted download links. Anyone you share a download link with can access that file until expiry.
AI and payments
Portraits are made manually with AI tools and checked by the operator. At launch, the approved AI provider and its data policy will be identified before checkout is enabled. PayPal processes payments; this site does not store card details. The email provider sends order and delivery messages only after configuration.
Retention
Download links expire30 days after the delivery package is prepared. Photos and fulfillment files are removed by the cleanup process after expiry; abandoned unpaid orders are removed after48 hours. The cleanup process runs while the server is operating. Payment record retention, backup handling and a deletion-request contact must be confirmed before launch.
Measurement
We count basic ceremony milestones and optional votes using a random browser session identifier. If you allow optional analytics, Google Analytics 4 measures visits and ceremony steps, and Microsoft Clarity records masked interactions and click heatmaps. These providers may process device, approximate location, visit and cookie data. We do not send photos, names, email addresses or your answers as analytics event properties. Personal content is masked in recordings; the 3D canvas is not a video recording. Optional scripts do not load before consent. Admin, checkout, private order and delivery pages do not load these trackers. You can reject analytics or withdraw consent using Privacy settings on the ceremony page; withdrawal reloads that page to stop recording. Advertising storage and personalization are disabled. Test and operator activity is labelled separately; it is not sales evidence. Google privacy · Microsoft privacy.
Current environment
This public preview stores test orders privately using Cloudflare Pages and D1. Checkout uses the PayPal sandbox; there is no real charge and customer email delivery is disabled. Data cleanup runs when site API requests are processed. Operator identity, portrait AI provider, final service terms and real delivery testing remain release prerequisites.
Back to the palace · Privacy · Terms · Refunds · FAQ