favprints

Privacy policy

favprints prints the photos you mark as favourite. To do that it needs those photos, your name and your address, and nothing more. Here is everything it stores, and why.

Who is responsible

Christian Seidel, Barcelona, Spain, the person who runs favprints (see the legal notice for the full details).

What we store

  • Your email address, to sign you in and to write to you about your account.
  • Your name and postal address, to send you your prints.
  • The photos you mark as favourite, and their file names, dates and sizes.
  • Your settings: how many photos a month, from which date, and your balance with its top-ups and orders.
  • A code that connects your iPhone to your account.

Payments go through Stripe. We never see your card number.

Why, and on what legal basis

To provide the service you signed up for: collecting, printing and posting your photos, and keeping your balance (GDPR art. 6(1)(b), performance of a contract). Order and payment records are kept because tax law requires it (art. 6(1)(c), legal obligation).

No advertising, no profiling, no selling or sharing of your data.

Who else receives it

  • Vercel: hosting of the site and private storage of your photos in Frankfurt, Germany.
  • Supabase: your account, address and settings, in the EU.
  • Resend: sends the sign-in emails.
  • Stripe: takes your payments.
  • Prodigi, the print lab in the United Kingdom, and the postal service: your photos, name and address, to print and deliver your envelope.

To fill in: the legal entity and country of each provider, a data processing agreement with each, and the transfer basis for the UK (adequacy decision) and for any US provider (EU-US Data Privacy Framework or standard contractual clauses).

How long we keep it

A photo is deleted 30 days after the lab reports your envelope as complete; photos too small to print are deleted as well. A list of file names and dates stays, so nothing is printed twice. Your account stays until you delete it.

To fill in: how long order and payment records are kept after an account is deleted (Spanish tax and commercial law: up to six years).

Cookies

favprints only sets the cookies that keep you signed in. No analytics, no advertising, no tracking cookies, so there is nothing to agree to.

Your rights

You can see, correct, download or delete your data, object to its use, or ask us to restrict it. Deleting is one button: “Delete my account” on your rules page removes your photos, address, settings and phone code straight away. For anything else, write to us.

If you think we handle your data wrongly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos.

To fill in: the contact address for privacy requests and the date this policy takes effect.