Privacy Policy
Last updated: September 2026
Who is responsible
The data controller is Rodolfo Santini, Via Formellese Nord Km 11,577, 00060 Formello (RM), Italy. Contact: hello@wordbloom.art.
What we collect, why, and on what legal basis
Order data (name, email, optional phone, shipping address, what you ordered): used to fulfil your order, send order emails, and handle issues. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Your creative content (images and words you upload to the editor, and the poster files generated from them): processed solely to produce your poster. Legal basis: performance of a contract. Your editor draft lives in your own browser (localStorage) and reaches our systems only when you order.
Payment data: handled by Stripe on their own systems; we never see your card details.
Accounting records: order records are kept as required by Italian tax law. Legal basis: legal obligation (Art. 6(1)(c)).
Analytics (Google Analytics 4): used only if you accept it in the cookie banner. Legal basis: consent (Art. 6(1)(a)), withdrawable any time via "Cookie preferences" in the footer.
New-poster updates: if you sign up with your email on the homepage, we use that address only to tell you when new posters are released. Legal basis: consent (Art. 6(1)(a)). Every email includes an unsubscribe link, and you can also write to hello@wordbloom.art to be removed at any time; we then delete your address from the list.
Who receives data
Stripe (payments), Supabase (order database, file storage and the sign-up list, EU region), Vercel (hosting and serverless functions), our print partner (name and shipping address, to produce and deliver physical orders), our email provider (to send order and new-poster emails), and Google (analytics, only with your consent). Some providers are US companies; transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses. We do not sell your data, and we send no marketing emails other than the new-poster updates you sign up for.
How long we keep it
Order records: up to 10 years (tax law). Poster files: abandoned checkout uploads are deleted within about 48 hours; digital-order files after 7 days; physical-order files after 90 days (kept that long to cover free reprints of damaged orders). Editor drafts: stored in your browser until you clear them. Sign-up list: until you unsubscribe. Analytics data: per Google Analytics retention settings, only if consented.
Your rights
You can request access, correction, deletion, restriction, portability, and object to processing, and withdraw consent at any time: email hello@wordbloom.art. You can also complain to a supervisory authority: in Italy, the Garante per la Protezione dei Dati Personali (garanteprivacy.it), or the authority of your country.
No profiling
We make no automated decisions about you and run no profiling.
Contact: hello@wordbloom.art