Privacy Policy

Who we are

PopArt.ee is a Tallinn, Estonia storefront for custom painted canvas portraits. Contact: info@popart.ee.

This page describes the information we use to create a preview, take payment, and deliver your canvas.

What we collect

The photo you upload so we can generate a digital painting preview.

Name, email, shipping address, and phone number you enter at checkout so we can confirm the order and deliver the canvas.

Payment is processed by Stripe. We do not store card numbers on our servers.

With your consent, the site uses Google Analytics to understand visits and orders. We do not sell personal data.

How we use it

To generate the on-screen preview, print the selected portrait, and ship it to you.

To email order updates and answer questions you send to us.

We keep order details as long as needed to fulfil the order and handle support.

Your rights

You can ask what data we hold, request a correction, or ask us to delete information that is no longer needed. Write to info@popart.ee.

If you are in the EU/EEA, you may also contact your local data protection authority.

Cookies and your choice

Necessary storage: popart_consent remembers your categories, policy version, choice time and expiry for 180 days. popart_visitor is a first-party HttpOnly cookie used for generation credits, abuse protection and linking the payment flow to the visitor; the server sets it for up to one year. Declining analytics does not disable these necessary functions.

Optional analytics: Google Analytics 4, provided by Google, measures page visits, photo upload starts, checkout starts and verified canvas purchases only after you allow analytics. Before consent or after refusal we do not load the Google tag or send analytics events or cookieless pings. There are no advertising trackers in this implementation and advertising consent stays denied.

After consent, Google Analytics may set _ga and _ga_H52TSV34MX cookies. The site configures their lifetime to up to 400 days; browser limits and Google tag behaviour may shorten this. This is a cookie lifetime, not a claim about Google's server-side data retention. Analytics receives cleaned page paths and selected campaign labels, not your photo, checkout contact fields or original Stripe session ID.

Only after consent, sessionStorage keys popart.landing.v1 and popart.checkout-context.v1 keep page and language context for the tab session. localStorage keys beginning popart.purchase.v1. suppress duplicate purchase events. These analytics values are removed on withdrawal or when an expired choice is detected.

Use Accept all, Reject optional or Customize on the banner. Cookie settings in the footer lets you change or withdraw consent at any time. Withdrawal immediately stops new analytics events and attempts to delete first-party Google Analytics cookies. It does not delete orders, generation credits or data already received by Google. If browser storage is unavailable, your explicit choice applies only to the current document and analytics is off on the next visit until you consent again.

Payment takes place on Stripe's hosted checkout, which has its own cookie and privacy information. You can also clear cookies in your browser. Questions about data or earlier analytics records can be sent to the contact address on this page.