Privacy Policy

Vinyl Status, LLC uses personal information to operate vinylstatus.com, process orders, provide design and customer support services, and measure and market our services. This policy covers customers, visitors, and people who contact us; employment-related information is addressed separately.

This policy is a notice about our practices, not a request to waive privacy rights or consent to every use of information. Any consent required by law must be obtained separately. Third-party websites and services have their own privacy notices.

We receive information directly from you, from your interactions with the site, and from providers involved in payments, fulfillment, support, and marketing. Depending on the features you use, this includes:

• Contact and account information: name, email, telephone number, account identifiers, and account preferences.
• Order and payment information: billing and shipping addresses, items, quantities, prices, transaction references, payment status, order history, and communications about an order. Payment processors handle payment credentials under their own policies.
• Artwork and communications: uploaded files, design prompts, remix source images, proofs, feedback, support messages, and reviews or photographs you submit. Files and text can contain personal information you include in them.
• Device and activity information: IP address, browser and device details, cookie and advertising identifiers, referring links, page visits, clicks, interactions, approximate location, and campaign information.

• Process payments, verify orders, prepare proofs, manufacture products, arrange delivery, and support reorders.
• Operate accounts, save design or cart preferences, answer questions, and communicate about orders.
• Provide requested design generation, remixing, address suggestions, and other optional tools.
• Detect fraud, investigate technical issues, protect the service, and comply with legal, accounting, and dispute-resolution requirements.
• Measure traffic and conversions, test site improvements, understand usability, and run advertising and marketing, subject to applicable privacy requirements.
• Send marketing communications subject to applicable consent and opt-out requirements. A purchase is not consent to every marketing channel.

We disclose information to providers that support the functions below, to authorities or other parties where legally required or appropriate to protect lawful rights, and in a business transaction such as a merger or asset transfer subject to applicable law. Reviews, photographs, store profiles, and product listings you choose to publish may be visible to other visitors.

Providers include Stripe and PayPal for payments; carriers and production partners for fulfillment; Amazon Web Services, Vercel, and our commerce infrastructure for hosting and files; Google, Meta, Microsoft, Stape, Omniconvert, and other advertising or analytics providers for measurement; Klaviyo for customer communications; Intercom for support chat; Yotpo for reviews; and AI providers for design tools. Seller features may use Persona for identity verification. The information disclosed depends on the feature and provider.

Browser pixels and server-side measurement can disclose device identifiers, IP address, browser details, page and order events, transaction values, and contact identifiers used for matching. Matching identifiers may be hashed; hashing does not necessarily make information anonymous. Server-side tracking is also subject to applicable privacy requirements.

We do not sell personal information for money. Advertising disclosures may qualify as a “sale,” “sharing,” or targeted advertising under some privacy laws, even without payment. See the privacy choices and rights sections below.

We store and process artwork and proofs to fulfill orders, provide support, and assist with reorders. Do not include sensitive personal information or third-party confidential material unless necessary and you have authority to provide it.

When you choose AI generation or remixing, your prompt and, for remixing, the source image are sent to the AI provider processing the request. Our tools use OpenAI and may use xAI as a fallback. Providers process inputs and outputs under their applicable terms and privacy practices. We also record usage and technical information such as IP address, selected model, request status, and feature use for limits, security, and troubleshooting. This policy does not promise that providers never retain inputs or use them for their own permitted purposes.

Google Maps address suggestions send the address search text and selected country to Google to return suggestions. Google’s handling is described in its privacy policy. You can enter an address manually. IP-based location providers can receive an IP address to return an approximate location. Other payment, address, and design services may receive information needed to provide the feature you select.

Cookies, local storage, pixels, and similar tools support several purposes. Necessary storage supports accounts, security, checkout, cart state, and saved privacy choices. Optional analytics helps measure visits, purchases, and performance. Advertising tools help measure campaigns, match audiences, and personalize advertising. Functional tools support additional preferences and features.

Examples include Google Analytics and Ads identifiers, Meta browser and click identifiers, Klaviyo identifiers, Stape’s visitor identifier, and Microsoft Clarity identifiers. Clarity and similar usability tools can collect interaction data, heatmaps, and session recordings; analytics is not categorized as necessary merely because it helps us improve the site. Available providers and identifiers can change with configuration.

Use Cookie preferences above to review this browser’s settings. You can also block or delete storage through your browser, although blocking necessary storage can disrupt accounts or checkout. Choices can be browser- and device-specific. Deleting cookies may erase a saved choice, and browser controls alone do not address every server-side disclosure or information already collected. For an account-level request or an issue with your settings, contact us.

Retention depends on the information and its purpose. Order and transaction records may be retained for accounting, legal obligations, fraud prevention, and disputes. Artwork, proofs, and related files may be retained for fulfillment, support, and reorders. Marketing records may be retained to manage preferences and suppression requests. Contact us to request deletion where applicable; there can be legal exceptions and backup limitations.

Our consent preference cookies are configured to last up to one year. Stape’s visitor cookie is configured for up to 400 days, affiliate cookies for 30 days, and browser cart storage for a 48-hour expiry. Stape’s outgoing tracking request and response logs are configured for a 10-day retention window and may contain identifiers and event information. This is the retention of those logs, not a promise that every provider deletes all information after 10 days. Other service logs, cookies, and provider records have their own retention periods.

We use safeguards intended to protect information, but no system or transmission is completely secure. We cannot promise absolute security or availability. Do not send passwords or complete payment credentials in artwork or ordinary support messages. This security notice does not waive our legal duties or your rights following a security incident.

Depending on your location and applicable law, you may have rights to access or receive a copy of information, correct it, delete it, restrict processing, withdraw consent, or opt out of sale, sharing, or targeted advertising. Email info@vinylstatus.com or use our contact page and describe your request. The email link above can start a sale/sharing opt-out request.

We may need to verify your identity for access, correction, or deletion without asking for more information than reasonably necessary. Authorized agents may submit requests with appropriate proof of authority. Rights and exemptions vary; we will respond under applicable law. You may also have a right to appeal a denied request or complain to a relevant privacy regulator. We will not unlawfully discriminate against you for exercising a privacy right.

For California residents where the CCPA applies, the categories of information, sources, business purposes, and recipient categories are described above and include information handled during the preceding 12 months. Advertising disclosures can constitute sharing for cross-context behavioral advertising. Applicable opt-out rights include recognized browser preference signals such as Global Privacy Control; these legal rights are not waived by visiting the site or accepting our terms. Contact us about an opt-out or a concern with a preference signal.

Unsubscribe from marketing emails using the link in the message. For SMS, follow the opt-out instructions in the message, including STOP where offered. Order, security, and other necessary service messages may continue. Withdrawing consent does not undo lawful processing already completed.

Our services and providers may process information in the United States and other countries with different privacy laws. Where EU, UK, or similar law applies, processing may rely on performing your requested contract, legal obligations, legitimate interests such as security and service improvement where lawful, or consent where required. Contact us for information about the basis and transfer safeguards applicable to your information or to exercise local rights.

Our services are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

We may update this notice as practices or legal requirements change. The date above identifies the latest version. Material changes requiring notice or consent will be handled as required by law; an update does not retroactively authorize a use that required consent.

For questions or requests, contact Vinyl Status, LLC at info@vinylstatus.com, through our contact page, or by mail at PO Box 1075, Bellevue, WA 98009, USA.