Privacy Policy

What we collect

• Account info: Name, email, password (hashed — we never see it in plain text).
• Maker profiles: City, state, printer info, and links to public maker profiles you choose to share.
• Requests: Child's first name, age, interests, and shipping address for delivery. Hospital info if submitted by staff.
• Donations: Processed through Stripe. We may store your name and email if you provide them. We never see or store credit card numbers.

How we use it

• To match makers with requests and facilitate delivery.
• To send transactional emails (request updates, claim confirmations).
• To review and approve requests before they go live.
• To improve the platform over time.

We do not sell your data. We do not run ads. We do not share your information with third parties except as needed to operate the platform (Stripe for payments, Resend for email, Railway for hosting).

Children's information

We collect minimal information about children (first name, age, interests) solely to fulfill print requests. We never publicly display children's full names or addresses. Shipping info is only visible to the maker who claims the request and to platform administrators.

Data security

Passwords are hashed with bcrypt. The platform runs on Railway with encrypted connections. Stripe handles all payment data on their PCI-compliant infrastructure. We do our best — but no system is perfect. If you discover a security issue, please email [email protected] immediately.

Your rights

You can request deletion of your account and all associated data at any time by emailing [email protected]. We'll process deletion within 30 days.

Changes

This policy will grow as the platform does. Registered users will be notified of significant changes via email.