Privacy

• Your email address, to sign you in and to send you order emails.
• Your designs: the answers you give, the conversation, the images you upload and the renders we make.
• Order details, payments and delivery address when you order a piece.
• Basic usage measurements — which pages and questionnaire steps a browser reached — tied to a random id stored in your browser, and to your account number once you sign in. Never your name, email, address or the content of your designs.
• If you join our email list — by ticking the box or using the sign-up form — your email address, when and where you joined, and the wording you agreed to. For each marketing email we record whether it was opened and whether a link in it was clicked.
• Error reports when a page breaks: which page, which browser and what went wrong. They carry no name, email or IP address.

To design and make your piece, to run your account, to send the emails that go with an order, to send news and offers if you asked for them, and to keep the service safe from abuse. You can leave the email list at any time with the unsubscribe link in every marketing email; order emails still arrive. Your designs are private to you unless you choose to share them. We do not sell personal data.

The workshop that makes your piece receives the specification and the delivery details it needs. These services process data on our behalf, each only for its own job:

• Vercel hosts the site.
• Supabase stores accounts, designs and orders, and runs sign-in.
• Stripe takes payments. Card details go to Stripe and never reach us.
• Resend sends our emails, and tells us when an address bounces or reports an email as spam so we stop writing to it.
• Anthropic (Claude) runs the design conversation.
• Google and Higgsfield generate the design images.
• Cloudflare Turnstile checks that sign-ins come from a person, not a bot.
• PostHog records the usage measurements, without storing IP addresses. We also keep our own count of which pages are visited, in what order, and for how long — against a random id in your browser, never your name, email or anything you type.
• Sentry receives the error reports, without storing IP addresses.
• 17TRACK receives your parcel’s tracking number and carrier so we can follow the delivery and email you about it — never your name or address.

A sign-in cookie keeps you signed in. The usage measurements keep their random id in a cookie and in your browser’s storage, and the bot check may set its own. None of them is used for advertising.

Email hello@chroma.haus to see, correct or delete what we hold about you. Deleting your account removes your designs; order records are kept as long as the law requires.