Privacy.

• Visitor counting, but no tracking and no advertising. We count pages viewed and roughly how many people viewed them. We cannot tell who you are, and we cannot follow you from one visit to the next.
• No cookies. That is why this site has never shown you a cookie banner.
• The poster you are typing stays in your browser until you decide to buy it.
• If you buy, we keep your email address and the words on your poster, so we can send it to you and rebuild it if you ask.

Values Studio is run by Rok Skrinjar s.p., the data controller for anything described here.

Nothing is stored on your device and no cookies are set. We do count visits, using Vercel Web Analytics: it records which page was viewed, roughly where in the world from, and which site you arrived from. It sets no cookie and keeps no identifier, so it cannot recognise you on a second visit or join your visits together. We use it to see which posters people look at, which is the only reason it is here.

We also count how many people press the buy button and how many complete the payment, so we can tell whether checkout is working. That count records the poster style and paper size, never who you are.

Our hosting provider keeps ordinary server logs, which include IP addresses, for security and to keep the site running. The typefaces the page is set in are fetched from Google Fonts and Fontshare, which means those services see your IP address when the page loads. We would rather they did not, and intend to serve the fonts ourselves.

The words you type are kept in your own browser, in something called session storage. They are not sent to us, and they are not sent anywhere else. Close the tab and they are gone.

That is why the editor works without an account, and why we cannot recover a poster you were working on but did not buy.

We keep, in a database in Frankfurt:

• your email address, so we can send you the file
• the words on your poster, its style, size and orientation — so the file can be rebuilt whenever you download it again
• what you paid, when, and the Stripe reference for the payment
• whether the email reached you, so we can tell if something went wrong

We never see your card details. Payment happens on Stripe’s own page; the card number is never sent to us and we could not store it if we wanted to.

The legal basis is performing the contract you entered into when you bought the poster, and afterwards our legitimate interest in being able to help if something goes wrong.

The feedback form on the home page stores what you wrote and, if you gave one, your name. Nothing else — not your IP address, not your email, unless you type it yourself.

We read these to work out what to build next. The legal basis is consent, given by pressing send, and you can ask us to delete a message at any time.

Only the services needed to run the shop. None of them are permitted to use your data for their own purposes.

Where a service processes data outside the EU, it does so under the transfer safeguards in its own terms — standard contractual clauses, and the EU–US Data Privacy Framework where applicable.

We do not sell your data, and we do not send you marketing.

Orders are kept for as long as we may need them for accounting and tax, which in Slovenia is generally several years. Feedback messages are kept until they are no longer useful, and deleted on request.

Under the GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to it, or ask for it in a portable form. Write to hello@valuesstudio.com and we will answer within a month.

If you think we have handled your data badly, you can complain to the Slovenian Information Commissioner (Informacijski pooblaščenec), or to the authority in your own country.

If this changes, the date at the top changes with it. We will not quietly start collecting something new — if that ever happens, it will be written here first.

See also our terms of sale.