Your data,
with care.

01 / Who operates this site

Controller contact

The site is operated under the name oneposters. Contact hello@oneposters.studio with privacy questions or requests. The legal entity or individual name and postal address of the data controller have not been provided in the project and must be added here before publication.

02 / Information handled

What the site uses

• Accounts: email address and authentication session information, handled through Supabase Auth when you create or sign into an account.
• Order requests: name, email, delivery address, selected products and options. The current checkout records an unpaid order request; it does not collect card details.
• Poster images: images uploaded to the studio or admin are stored in public Vercel Blob objects. Anyone with an image URL may be able to view that image, so do not upload material you need to keep private.
• On-device preferences: cart, wishlist, theme, recently viewed products and studio draft settings are saved in browser storage. These remain on your device unless you submit relevant order information or upload an image.
• Website analytics: Vercel Web Analytics is loaded in production. Vercel says Web Analytics does not use cookies and uses a visitor hash that resets daily; page views, referrers and device or location categories may be reported. See Vercel Analytics documentation.

03 / Why and how long

Purposes and retention

Account and order information supports account access, responding to order requests, delivery coordination and customer support. Uploaded images support the poster studio and product catalog. Analytics supports aggregate site measurement. The exact legal basis for each purpose and the retention schedule for account, customer, order and uploaded-image data must be confirmed by the operator and added before launch. Cart, wishlist, theme and studio preferences can be removed by clearing this site's browser storage.

04 / Service providers

Where information goes

The application connects to Supabase for authentication and database services, and Vercel for hosting, public image storage and production analytics. Confirm the project's selected data regions, applicable data-processing agreements, subprocessors and any international transfers in the provider dashboards and contracts before publication.

05 / Your choices

Access and requests

You can contact hello@oneposters.studio to ask about access, correction, deletion, restriction, objection or portability where those rights apply. You may also complain to the data protection authority responsible for your location. Requests will be handled under the applicable privacy laws.

06 / Security and updates

Protecting information

The site uses authenticated access for account and admin functions and HTTPS in deployment. No internet service can promise perfect security. This notice should be updated when the site's data practices or service providers change.