Privacy policy
What we collect, why we collect it, and who else touches it.
Last updated 13 August 2026
Draft — needs legal review before launch.
This describes the intended data handling of the platform as designed. It has not been reviewed against GDPR, CCPA or state privacy law. Consent for analytics is implemented and gated by region, but a lawyer still needs to check this wording, the retention periods and the sub-processor list. Do not publish it as-is.
What we collect
- Order details — your email, shipping address and what you bought.
- Custom sign designs — the words, font, size and colour you chose, plus the proof artwork. We keep these so we can remake a sign and to evidence what you approved.
- Payment details — handled entirely by Stripe. Card numbers never reach our servers and we cannot see them.
- A functional cookie —
pref_currency, which remembers the currency you picked. - Analytics — how people move around the site, so we can see which pages are confusing and fix them. See the section below.
Analytics and session recording
We use two measurement tools on the shop pages:
- Google Analytics records which pages you visit, roughly where in the world you are, and what device you used. Your IP address is anonymised before it is stored.
- Microsoft Clarity records a playback of your visit — mouse movement, clicks and scrolling — so we can see where a page is going wrong. Text you type into form fields is masked before it leaves your browser, and we never see it.
Neither runs on pages that show your own order: the staff area, the proof-approval page and the order-lookup page are all excluded, so your name, address and order details are never sent to either company.
Your choice
If you are in the UK, the EU, the EEA or Switzerland, neither tool loads until you agree. You are asked once, on your first visit, and saying no is exactly as easy as saying yes. Decline and nothing is loaded at all — not loaded-then-ignored, genuinely absent from the page.
Elsewhere they load by default, which local law permits. Either way you can change your mind at any time using Cookie settings at the bottom of any page, or by using an ad blocker or the Google Analytics opt-out add-on.
Your choice is remembered in a cookie called gns_consent for a year, then we
ask again.
What we don't do
We don't sell your data, we don't share it with advertisers, and we don't run retargeting or advertising pixels. The words on your sign are yours; we use them to build the sign and nothing else.
Who processes data for us
- Stripe — payments and payment records
- Cloudflare — hosting, database and file storage
- Resend — transactional email (order confirmations, proofs, tracking)
- Google — website analytics
- Microsoft — session recording for usability
How long we keep it
Order records are kept for seven years to meet US tax and accounting requirements. Custom design files are kept for two years so we can remake a damaged sign. You can ask us to delete anything not legally required.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email privacy@glownsign.com and we'll respond within 30 days.
Who we are
Glow N Sign LLC, Sheridan, Wyoming, United States. We are the data controller for this store.