Política de privacidad
Last updated: 2026-05-09
1. Who we are
PaperMagpie ("we", "us") operates at papermagpie-store.pages.dev, selling printable digital junk journal kits & ephemera. For privacy questions, contact [email protected].
2. What we collect
We keep the data footprint minimal. We collect:
- Email — when you sign in via magic link or Google, or when you place an order. Used to send sign-in links, receipts, and (only with your consent) product updates.
- Name + profile picture — only if you sign in with Google.
- Order history — date, products purchased, order ID. Held by our payment processor (Polar.sh) and a copy in our system to power your re-download library.
- Locally-stored favorites — saved in your browser's localStorage. Never sent to us unless you sign in (planned future feature).
- Server logs — request URL, timestamp, IP address, user agent. Used to debug errors and detect abuse. Retained for 30 days.
- Advertising conversion data — when you arrive from a Google or Microsoft (Bing) Ads click and complete a purchase, we send back to those ad platforms an anonymised "conversion" event so we know which ads work. The data shared is the click ID those platforms set in the URL — we do not share your name, email, or order details.
3. Payment data
Card numbers and billing addresses are handled exclusively by our payment processor Polar.sh, who acts as the merchant of record. We never see, store, or transmit your card details.
4. Cookies + ad tracking
Strictly-necessary cookies:
pm_sess— keeps you signed in across visits, 90-day rolling.pm_newsletter_dismissed— remembers you closed the newsletter popup so we don't re-prompt.pm_favorites(localStorage, technically not a cookie) — saves your favorited kits.
Ad measurement cookies (only if you arrived from a paid ad):
- Google Ads conversion tracking (
_gcl_aw,_gcl_dc) — when you arrive from a Google Ad and purchase, Google sets these cookies so we can attribute the conversion. The data sent back to Google is the click ID Google itself put in the URL — not your name, email, or order details. - Microsoft (Bing) Ads UET — same idea for Bing / Edge ad clicks.
For visitors in the EEA / UK, our cookie consent banner lets you decline ad measurement cookies on first visit. Strictly-necessary cookies (sign-in, basic functionality) cannot be declined as the site won't work without them. We do not use any other analytics cookies, retargeting pixels, or third-party tracking. If you don't want any ad tracking, most browsers offer a "Do Not Track" setting and ad blockers like uBlock Origin will also block the conversion pixels.
5. Email
Transactional emails (sign-in links, receipts, download links) are sent through Resend. We don't add you to any marketing list without explicit opt-in.
6. Sub-processors
We share your data only with these providers, each under their own privacy policy:
- Polar.sh + Stripe — payments + tax + invoicing
- Google Ads / Microsoft (Bing) Ads — conversion attribution only (click ID → purchase event)
- Cloudflare — hosting + DNS + DDoS protection
- Resend — transactional email delivery
- Google — OAuth sign-in (only if you choose "Continue with Google")
7. Your rights (GDPR / CCPA)
You can email us at [email protected] to:
- Get a copy of all data we hold about you
- Ask us to delete your account + all associated data
- Correct anything inaccurate
- Withdraw consent for marketing emails (also via the unsubscribe link)
We respond within 30 days.
8. Data retention
We keep your account + order history as long as your account is active. If you delete your account, all personal data is removed within 30 days, except information we are legally required to keep for tax records (typically 7 years).
9. Children
PaperMagpie is not directed at children under 13. We do not knowingly collect data from anyone under 13.
10. Changes
If we make material changes to this policy, we'll update the "Last updated" date and, where required by law, notify you by email.