Privacy policy

We collect the smallest set of information that lets the studio work. It falls into five groups.

Your account

When you sign up we store your email address, and a display name and Instagram handle if you choose to add one. Accounts are handled by Supabase Auth. If you sign in with Google, Google tells us your email address and basic profile information — we never receive your Google password.

Your content

Designs you create, glazes and palettes you build, stamps you draw, journal entries, and any photographs you upload. Designs are stored as a parametric description of the piece rather than as a 3D file.

Newsletter

If you sign up for studio notes we store your email address and where you signed up from, so we can tell which page brought you in.

Print orders

When you order a printed tool we store the items, the shipping address you enter, your contact email, and the status of the order including any tracking number.

Payments

Payments are processed by Stripe. Card numbers go directly to Stripe and are never sent to or stored on our servers. We keep the payment reference Stripe gives us so we can match a payment to an order.

Technical

A session cookie that keeps you signed in, and aggregate page analytics through Vercel Analytics and Google Analytics 4. The analytics are counts of page views, sessions, and basic performance figures. There is no advertising tracker on this site, and nothing is sold to a data broker.

• To run the studio — save your work, sign you in, and show you your own designs and journal.
• To fulfil print orders, which means printing what you ordered and posting it to the address you gave us.
• To send transactional email you asked for by acting: order confirmations, shipping notifications, and sign-in links.
• To send studio notes, only if you signed up for them, and only until you unsubscribe.
• To keep the service working and secure — diagnosing errors, preventing abuse, and understanding in aggregate which pages people use.

• We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
• We do not use your designs or photographs in our own marketing without asking you first, in writing, each time.
• We do not make your work public on your behalf. A design becomes visible to other people only when you create a share link for it, and it stops being visible when you revoke that link.
• We do not run advertising trackers or sell audience data.

We use a small number of service providers. They process data on our instructions and only for the purpose listed.

• Supabase — database, authentication, and file storage for designs and photographs.
• Vercel — hosting the website and aggregate analytics.
• Google — Google Analytics 4 for page views and sessions on the marketing site and the signed-in studio.
• Stripe — payment processing for print orders. Stripe is the only party that receives card details.
• Resend — sending transactional email such as order confirmations and shipping notices.
• Our print and shipping partner — receives the item files and the delivery address needed to make and post your order, and nothing else.

We will also disclose information if the law requires it, and we will tell you when we are permitted to.

We keep your account and your content for as long as your account is open. Order records are kept longer because tax and accounting rules require it.

You can ask us to delete your account at any time by emailing hello@clayista.com. Deletion removes your designs, glazes, stamps, journal entries and uploaded photographs. We complete deletion requests within 30 days. Anything you shared publicly stops resolving as soon as the account is gone. Backups roll off on their own schedule shortly after.

If you live in California, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you specific rights over your personal information.

• Right to know — what personal information we have collected about you, where it came from, why we collected it, and who we shared it with.
• Right to delete — ask us to delete the personal information we hold about you, subject to the narrow exceptions the law allows, such as completing a transaction or meeting a legal obligation.
• Right to correct — have inaccurate personal information about you fixed.
• Right to opt out — of the sale or sharing of personal information, and of profiling used for significant decisions.
• Right to non-discrimination — we will not give you a worse service or a worse price for exercising any of these rights.

We do not sell or share personal information as those terms are defined by the CPRA, and we have not done so in the preceding twelve months.

To exercise any of these rights, email hello@clayista.com from the address on your account, or tell us which address the request concerns. We will verify the request against your account before acting on it, and we will respond within the timeframe the law sets. An authorised agent may make a request on your behalf with written permission.

Clayista is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has created an account, email hello@clayista.com and we will delete it.

We will update this page when our practices change, and the effective date at the top will change with it. If a change is material — a new category of data, a new purpose, a new processor handling your content — we will email account holders before it takes effect rather than quietly editing the page.

Clayista answers privacy questions at hello@clayista.com. A person reads it.

See also our Terms of use and Shipping and returns.