Privacy Policy

Last updated November 9, 2026

Lettera is a small studio. This policy explains, in plain language, what happens to your photograph, your words, and your personal information when you use this site.

Your photograph and your words

When you compose a portrait, the photograph you choose and the words you enter are processed locally in your web browser. We never store your original photo or a full-resolution portrait. If you share, we store only the small preview described below, for up to 90 days.

So that your portrait survives a reload or the trip to checkout and back, your browser keeps a reduced copy of the photograph and your settings in its session storage. That copy stays on your device and is cleared automatically when you close the tab.

When you purchase, we send Stripe a short one-way fingerprint of your photograph and words, never the photograph or words themselves. The fingerprint is a string of letters and numbers that cannot be turned back into your photograph or text; it simply lets us confirm that a purchase belongs to the design you composed.

Because we never hold a copy of your original photograph or a full-resolution portrait, we cannot recover a portrait for you after the fact.

Sharing a preview link

If you choose 'Send this to someone,' we upload a small, watermarked preview of your portrait (about 720×900 pixels) to our hosting provider, Cloudflare, and show it at an unlisted link. The preview shows your photo and your words as they appear in the design. We never upload your original photograph or the full-resolution file, and we don't store your words as separate text. Anyone who has the link can view the preview, and they can forward it. Links are not listed and are marked so search engines don't index them. Along with the preview we keep its creation time, its file size, and a code that lets the device that created it delete it. To limit abuse, we briefly keep a one-way scrambled (hashed) version of your IP address, for up to one hour. The share page uses Cloudflare Web Analytics, which counts visits without cookies. Shared previews are deleted automatically after 90 days. To remove one sooner, email hello@letteradesigns.com with the link, or tap Delete link on the device you shared from. Only share photos you have permission to share.

Payment information

Purchases are processed by Stripe. When you check out, you are on Stripe's secure page, not ours. Lettera never receives or stores your card number, security code, or expiration date.

Stripe shares a limited record of the transaction with us: an order identifier, the amount, the edition purchased, the design fingerprint described above, and the email address you provide at checkout. We use this only to confirm your payment, deliver your file, and respond to support requests.

Email address

Stripe collects your email address at checkout. We use it to send your receipt and, if needed, to re-deliver your file or answer a question. We do not add you to a mailing list, and we do not sell, rent, or share your address with anyone.

Analytics

We may use Cloudflare Web Analytics to understand, in aggregate, how many people visit the site and which pages they view. It is cookieless and privacy-friendly: it does not track individual visitors across sites or build profiles. We do not use advertising trackers, and we do not sell any data.

To see what's working, we count a few anonymous events on our site, like a preview being made, a link being shared, or a checkout starting, along with the page and the site that sent the visit. These counts use no cookies and don't include your name, email, IP address, photo, or words.

If you arrived from one of our occasion pages or a partner link, that source name is attached to your order record at Stripe.

A shared preview lives at an unlisted link. Anyone you send it to, and anyone they forward it to, can open it.

Fonts and third parties

The typefaces on this site are served from our own domain. No third-party font service is used, so loading a page does not share your IP address with a font provider. The site is hosted on Cloudflare, which processes standard request information (such as your IP address) to deliver pages securely.

Cookies

Lettera does not set advertising or tracking cookies. Stripe sets cookies necessary to process your payment securely and to prevent fraud; these are governed by Stripe's own privacy policy.

How long we keep things

• Your photograph and words: your original photograph and a full-resolution portrait are never stored by us. The reduced copy in your browser is cleared when you close the tab.
• Shared previews: deleted automatically after 90 days, or sooner if you tap Delete link or ask us.
• Order records: retained as long as required for tax, accounting, and dispute resolution, typically seven years.
• Support emails: retained while relevant, then deleted.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to certain processing. Because we hold very little, essentially an order record, an email address, and any preview you choose to share (deleted after 90 days), these requests are usually simple to fulfill.

To make a request, write to hello@letteradesigns.com. We will respond within 30 days. We may need to retain order records to meet legal and tax obligations even after a deletion request.

Children

Lettera is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Material changes will be noted on the site.

Contact

Questions about privacy: hello@letteradesigns.com