Privacy
We collect what we need to take your order and get a poster to you, and nothing beyond that. We never see your card number, and we do not sell your information to anybody.
Who we are
Rock on Paper is a project of 12 Line Studio LLC, based in Chicago, Illinois. If you have a question about anything here, email merch@rockonpaper.com.
What we collect
- Your name, email address, shipping address and, if you give it, a phone number for the carrier.
- What you ordered, when, and what it cost.
- Emails and messages you send us, so we can answer them and remember the context later.
- The IP address an order is placed from, kept with the order record for fraud prevention.
- Basic, aggregated analytics about how the site is used: which pages are visited, roughly where from, and what kind of device. This is not tied to your name and is not used to follow you around other websites.
Your card details
Card payments are processed by Stripe. Your card number is entered into fields hosted by Stripe and goes directly to them. It never reaches our systems, and we could not see or store it if we wanted to. Stripe handles that data under its own privacy policy.
Why we hold it
- To take payment, print a shipping label and get the poster to you.
- To send you an order confirmation and tracking.
- To answer your questions and sort out problems with an order.
- To keep the accounting and tax records a business is required to keep.
- To detect and prevent fraud, which protects both of us.
Who else sees it
Only the services it takes to run a shop, and only the part each one needs:
- Stripe, to process payments and screen for fraud.
- EasyPost, and through it UPS, to rate and print your shipping label. They receive your name and address.
- Our email provider, to send order confirmations and tracking.
- Vercel, Sanity and Neon, which host the site, its content, and our order records.
We do not sell your personal information, we do not rent it, and we do not share it for anyone else to advertise to you. We will hand over records if we are legally required to, and we will tell you if we are permitted to.
Email from us
Order and shipping emails are part of the transaction and are sent to everyone who buys something. Anything else, like a note that a new poster has gone up, is opt in. Every one of those has an unsubscribe link, and unsubscribing does not affect your order emails.
Cookies
The site uses a small number of cookies to keep your cart intact between pages and to complete checkout. Stripe sets its own cookies for fraud prevention on the checkout page. We do not run advertising cookies and we do not use cross-site tracking.
How long we keep it
Order and payment records are kept for seven years, which is what tax and accounting rules require. If you ask us to delete your information, we delete everything we are not obliged to keep and tell you what is left.
Your rights
Whoever and wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email merch@rockonpaper.com and we will respond within 30 days.
California
California residents have the right to know what personal information is collected and why, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of, but the other rights apply and are exercised through the same email address. We will not treat you differently for exercising them.
Children
This shop is not aimed at children and we do not knowingly collect information from anyone under 13. If you believe a child has given us their details, email us and we will remove them.
Security
The site is served over HTTPS, payment data never touches our systems, and access to order records is limited to the people who pack and ship them. No system is perfect, and we will tell you promptly if something happens that affects your information.
Changes
When this policy changes, the effective date at the top changes with it. If a change materially affects how we handle your information we will say so on the site rather than quietly amend the page.