Legal
Privacy Notice
Your GPX or TCX file is read in your browser and never uploaded. When you press Order This Print, the studio sends the simplified line, its numbers and your words to draw the print, and your name, email and address go only to the companies that take the payment, make the print and deliver it.
Last updated
Who is responsible for my data?
PaintedApp, LLC runs Painted Miles and is the controller of the personal data described here. Our mailing address is 1327 SE Tacoma St #394, Portland, OR 97202, United States, and you can write to support@painted.app about anything on this page. We collect little, keep it only as long as it's useful to you or the law requires, and never sell it.
What happens to the file I bring?
It's read in your browser and never uploaded.
The studio reads your GPX or TCX file here, on your device, and draws the line from it. The file isn't sent anywhere: not when you open it, not while you change the layout or the colours, and not when you order.
So that a trip to Stripe's checkout and back doesn't lose your route, the studio keeps the route it read in this tab's session storage. Your browser clears it when you close the tab.
What leaves my device when I order?
The line and its numbers, never your file.
Nothing is sent until you press Order This Print. Then the studio sends what it takes to draw the print: the simplified line (up to 5,000 points), up to 300 elevations along it, the distance, climb, time and date, and the words you typed. The file itself, its timestamps, heart rate and cadence stay on your device.
The line is used to draw the print and isn't kept on its own. The record of your order in Stripe holds your choices, your words and the numbers, never the route.
Can a route show where I live?
It can, if it starts at your door.
The print shows the line with no map under it, so no street is named on it. A recognisable start can still identify a place: a run that begins at your front door begins the line at your house, and someone who knows the area may see it. If that matters to you, trim the start and the finish in your app before you export the file, or set a privacy zone there.
Some apps hide a privacy zone only on their own map and still export the whole track. The studio draws exactly what your file holds, so look at where the start triangle sits before you order.
Do you use cookies or analytics?
No.
This site sets no cookies and runs no analytics, advertising pixels or third-party trackers. The one thing the studio keeps in your browser is the route it read, in session storage, until you close the tab. If that ever changes, this page changes first, and we'll ask before loading anything. Stripe's checkout page is Stripe's own: it may set its own cookies to prevent fraud, under Stripe's privacy policy.
What do you collect when I order?
Only what it takes to make your print and get it to you.
- Your name and shipping address, to print and deliver your order. A Digital File or a gift code needs no address, so none is asked for.
- Your email address, to send your receipt and to reach you about the order.
- Your route as the studio sends it: the simplified line, its elevations, the distance, climb, time and date, the words you typed, and the layout, ground, size and material you chose, to draw and print it.
- For a gift, the names and the message you write for the note. They go to Stripe with the payment and into the email that carries the code to you, and nowhere else.
- Your payment details never reach us. Stripe collects and holds your card details directly; we see the outcome and nothing more.
We use these to carry out the order you placed, and we keep the record because tax and accounting law require it. There are no accounts, and your file is never uploaded.
Who else sees it?
Only the companies that make the order happen, and only the part each one needs.
- Stripe processes the payment. It collects your card and billing details directly and holds the record of your order.
- Prodigi or Printful prints and ships it, whichever of the two makes your print. That lab receives your name, shipping address, email address, the order details and the print file, and when your print ships we get the carrier and tracking number from it and email them on to you. Asking both labs for a shipping price sends only the product, its size and the country, nothing about you.
- Resend sends your receipt, your file or gift code, your tracking link and, if you said yes, the anniversary note. It receives your email address and the message.
- Vercel hosts the site, runs the checkout and stores the print file. Like any web host, it sees your IP address when your browser asks for a page.
The print file, and a small preview of it, are stored on Vercel Blob at an address made from a fingerprint of the print itself: it's listed nowhere and can't be guessed, and the same print ordered twice is drawn once. The print shows your line, so the file carries your route as a picture. It's drawn when you open checkout, so it exists even if you don't go on to pay, and the lab collects it from there to print. Like your order record, nothing deletes it on a clock today; ask us and we'll remove yours.
Some of these companies operate outside your country, including in the United States. We don't share your data with anyone for their own marketing.
Will you email me after I order?
About that order, yes. Anything more, only if you said yes.
Every order gets the emails it needs: the receipt, your file or your gift code, and for a print, the tracking link when the lab ships it.
When you order a print, Stripe's checkout may ask whether you'd like to hear from us; whether it asks depends on where you are. If you tick yes, we'll send one note a year after your order, with a link that opens the studio on the layout and colours you chose. It's the only note we send about that order, and nothing else is ever sent on the strength of that yes. If you don't tick it, or it isn't offered, no note is sent.
To stop it, reply to any of our emails or write to support@painted.app before the year is up, and we'll mark your order so it isn't sent. Your answer is kept with your order in Stripe.
Where is my order kept, and for how long?
In Stripe. We keep no database of our own.
The record of your order, meaning what you bought, your email, the address it went to, and the words and numbers on the print, lives in Stripe, and the lab that made your print keeps its own record of the job. We keep it for support, for our promise on damaged or wrong prints, and for tax and accounting. Nothing deletes it on a clock today; ask us to delete it and we will, unless the law requires us to keep it.
What are my rights?
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, and we'll act within 30 days. Because there are no accounts, requests come by email: write from the address you ordered with. If you're in the EEA or the UK you also have the right to object to processing, to ask for portability, and to complain to your local data protection authority.
If you're in California or another US state with a privacy law, you have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We don't sell or share personal information, for money or for advertising, so there's nothing to opt out of. We honour Global Privacy Control signals all the same, and we'll never charge you differently for exercising any of these rights.
Children
This shop is for adults. We don't knowingly collect data from anyone under 16. If a child has given us something, write to us and we'll remove it.
Changes
If this notice changes, the date at the top changes with it. The terms of service and the shipping and returns page cover the rest of an order.