Privacy Policy

Last updated 15 August 2026

The short version

We store the email address you sign up with and the customs you type in. Nothing is sold, nothing is shared with advertisers, and there are no third-party trackers on this site. Other accounts cannot see your data.

What we collect

• Your account: email address, display name, and a scrambled (hashed) version of your password. The password itself is never stored and cannot be read back, not even by us.
• What you type in: message links, fan names, order details, prices, due dates, payment entries and notes.
• Who did what, and when you were last here: which account added a custom, logged a payment, marked something delivered or wrote a note, plus the date you last used the app. On a team this is what makes the work show up as yours rather than someone else's.
• Ratings of assistants: if you assist a creator, they can record a private star rating and a written review of your work. It is visible only to them, not to you, and it is not part of your account or shown anywhere else in the app. It stays on their team even if they later remove you. You can ask us for a copy of anything recorded about you — see Your choices below.
• Feedback and requests: anything you send from the Feedback box on the Settings page, and which requests you have voted for. Your name is never shown on the request board — other people see the words, never who wrote them. The operator can see who sent a request, so that we can answer it and so one person cannot vote for the same thing many times over. We may tidy the wording of a request before putting it on the board; the words you actually wrote are kept.
• Basic technical logs: the web server records IP addresses and page requests, which is how failed sign-in attempts are rate limited. These rotate and are not kept long term.

There are no analytics scripts, no advertising pixels, and no cookies beyond the one that keeps you signed in.

Fan information

You choose what goes in. If you type a fan's name or paste a link to a conversation, that becomes personal information about someone else that you are storing here. Keep it to what you actually need for the order, and don't store anything you wouldn't be comfortable being responsible for.

Where it lives

On a single server rented from DigitalOcean, in a database file that only this application can read. Traffic to and from the site is encrypted (HTTPS). Backups are taken daily and kept for two weeks on the same server.

Who can see it

• You, and anyone you deliberately invite into your workspace.
• The operator of this service, who has technical access to the server and will only look at your data when needed to fix a problem or answer a support request.
• No one else. Every database query is filtered by your workspace, so one account cannot reach another's data even by guessing. The one exception is the feedback board, which is deliberately shared between all accounts — and it shows the words, never the name.

We would only hand data to anyone else if legally required to.

How long we keep it

Until you delete it. Archived customs stay until you remove them. If you ask for your account to be deleted, everything in it is removed from the live database, and drops out of backups within two weeks.

Your choices

• Ask for a copy of everything stored about you.
• Correct anything that is wrong — most of it you can edit yourself in the app.
• Ask for your account and its contents to be deleted.

Email the address below and we'll action it. Depending on where you live you may have further rights under laws such as the GDPR or CCPA; those apply regardless of what this page says.

Children

This service is for adults. It is not intended for anyone under 18, and accounts believed to belong to a minor are removed.

Changes

Meaningful changes update the date at the top and are announced in the app.

Contact

hello@mycustoms.cc