Privacy policy

Last updated October 6, 2026 (email links, tracing marks, partner codes). DRAFT - to be reviewed before launch.

Paw Legion makes holiday pet portraits from photos you upload. This page explains what we collect, why, and how long we keep it. We keep it short because we keep very little.

What we collect

• Your photo - only to make your portraits.
• Your choices - the looks you picked and the optional short note you typed.
• The portraits we make - the watermarked previews and the full-resolution files.
• Order details - if you buy: your email address, and for prints your shipping address. Card details go straight to Stripe; we never see or store your card number.
• Your email address - if you give it to keep making free previews, at checkout, or to hear when ordering opens. We use it only to send your previews, your order and its updates, or that one "ordering is open" note. No newsletters unless you ask. "Delete my data" removes it too.
• Where you came from - if you arrived from one of our posts or a rescue partner's link, we note that source (for example "tiktok" or a rescue's code) on your order, so we can count sales and pay the rescue's share.
• A random code in your browser (local storage, not a tracking cookie) so you can come back to your previews. We store only a scrambled (hashed) version of it.
• A scrambled (hashed) version of your IP address - only to stop abuse (rate limits), deleted within 2 days.

We do not use advertising trackers, we do not sell or share your data for advertising, and we do not use your photo to train any AI model.

How your portraits are made

Your portraits are AI-generated art, made by open-licence AI models running on our own computer. Your photo is not sent to any outside AI company. An automatic safety check (also on our own computer) looks at your photo and at the results.

Tracing marks

Previews carry a visible watermark. Previews and purchased files also carry an invisible tracing mark (a short code tied to the preview set or order, not to your name), so we can tell if a preview was copied without paying.

How long we keep it

• Photos, previews and full-resolution files are deleted automatically 30 days after upload (or after payment, for purchased files).
• Photos that fail the safety check are deleted right away.
• You can delete your photos and previews at any time with the "Delete my photos now" button on the portrait page (it works from the same browser you used).
• Order records (what was bought, when, the amount, email and shipping address) are kept as long as tax and accounting law requires.

Who else sees it

• Stripe processes payments (Stripe privacy policy).
• Printful prints and ships physical products; it receives the print file and your shipping address (Printful privacy policy).
• Cloudflare hosts this site and stores files while they are kept.
• Resend sends our order emails (Resend privacy policy).

Children

This shop is for adults (18+). We do not accept photos of children on their own.

Your rights and contact

You can ask us what we hold about you, ask us to correct or delete it, or ask any privacy question by replying to your Stripe receipt email. California residents have the rights described in the CCPA; we do not sell or share personal information.