Shop Privacy Notice

Shop Privacy Notice

Last updated: [ATTORNEY REVIEW — SET ON PUBLICATION]

[ATTORNEY REVIEW] This is a first draft written from what the Shop’s code actually collects and does. It needs legal review before real customers use the Shop.

This Shop Privacy Notice explains what personal information FundedYouth (“FundedYouth,” “we,” “us,” or “our”) collects through the FundedYouth Shop, online at shop.fundedyouth.org and in person at our El Cajon location (together, the “Shop”), how we use it, and the choices you have.

It adds to our general Privacy Policy. Where this Notice and the general Privacy Policy differ, this Notice controls for the Shop. Your purchases are also covered by the Shop Terms of Sale.

FundedYouth is a 501(c)(3) educational nonprofit registered in California (EIN 93-4090260) with a physical location at 415 Parkway Plaza, Suite 519, El Cajon, CA 92020.

---

1. What the Shop does

The Shop takes custom 3D print requests. You create an account, send us a 3D model and your choices (material, colors, notes), we review it and send a price (a “quote”), you pay through Stripe, and we print it. You can also buy items, or pay for a quote, in person at our location.

The online Shop is hosted on Cloudflare Workers, stores uploaded files in Cloudflare R2, keeps account and order records in a Neon Postgres database, and takes payments through Stripe. Section 5 lists every provider.

2. What information we collect

2.1 Your account

• Email and password sign-up: your name, email address, and password. Your password is stored only as a one-way hash, so we can’t read it. We send a confirmation email before the account can be used.
• Google sign-in: see Section 3.
• Sign-in sessions: when you sign in, we record the session’s start and expiry time, your IP address, and your browser’s user-agent string (browser and device type). We use these to keep you signed in and to spot suspicious sign-ins.
• Sign-in attempt counters: to slow down password-guessing, we count recent sign-in attempts by IP address.

2.2 Your print requests

When you send a print request, we collect:

• Contact details: name, email address, and phone number (optional). These can differ from your account details.
• Your model: either an uploaded STL or 3MF file (up to 200 MB), or a link to a model hosted elsewhere.
• Reference photos: up to 5 photos, uploaded (up to 20 MB each) or as links.
• Your choices: material, colors, whether it is a multi-material print, any notes you write, and whether you marked the file as private or personal.
• Order history: the quote and any note we add, payment status, Stripe payment references, and a timeline of status changes and messages.

2.3 Payment information

Payments are made on a checkout page hosted by Stripe. Your card number, CVV, and expiry date go directly to Stripe. We do not receive or store your card details. We give Stripe your account email and the request number and amount. We keep the Stripe checkout and payment identifiers so we can match a payment to your request, and we receive the payment’s amount and status.

2.4 In-store purchases

When you buy in person, card payments are processed by Stripe, and your card details go to Stripe, not to us. We don’t save any personal information for in-store purchases, and you don’t need a Shop account to buy in person. Stripe keeps its own record of the payment under its own privacy policy.

2.5 Information stored only in your browser

While you fill in a print request, the Shop saves your draft (including the model file and photos you’ve picked) in your own browser’s storage, so it survives a page reload. It doesn’t reach us until you submit. It stays in that browser until you check out or clear it.

2.6 Cookies

The Shop uses cookies only to keep you signed in and to protect sign-in. It does not use advertising or analytics cookies.

[ATTORNEY REVIEW] The Shop’s code has no analytics or tracking scripts as of this draft. If any are added, update this section.

3. Google sign-in

If you choose Continue with Google, Google shares the following with us, with your permission:

• Your name
• Your email address, and whether Google has verified it
• Your profile photo (a link to it)
• Your Google account’s unique identifier

Google also gives us sign-in tokens, which we store so the sign-in works. We ask Google only for basic profile and email information. We don’t ask for or get access to your Gmail, Google Drive, contacts, calendar, or any other Google data.

We use this information only to:

• Create your Shop account and sign you in
• Show your name (and photo, if shown) in your account
• Send you email about your account and your requests

If you already have a Shop account with the same verified email address, your Google sign-in is linked to that account.

We don’t sell Google user data, use it for advertising, or share it with anyone except the service providers in Section 5 that run the Shop for us. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

You can remove the Shop’s access to your Google account at any time at myaccount.google.com/permissions. This stops future Google sign-ins. It doesn’t delete your Shop account. See Section 8 for that.

4. How we use information

We use Shop information to:

• Create and secure your account
• Review your request, prepare a quote, and print your item
• Take payment and keep records of it
• Email you about your account (confirmation, password reset) and your requests (quote, ready, cancelled)
• Tell our staff when a request needs attention. These internal emails include your name and email address.
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations, such as tax records

We do not sell personal information, share it for advertising, or use your model files for anything other than your request without your permission.

5. Who we share information with

Only FundedYouth staff who handle Shop requests can see your request and files. The Shop also relies on these service providers, which process information only to provide their service to us:

Provider	What it does for the Shop	What it handles
Cloudflare, Inc.	Hosts the Shop (Workers), DNS and security, and stores uploaded files (R2)	All Shop traffic, server logs, your model files and photos
Neon (Databricks, Inc.)	Database (Postgres)	Account, session, and request records, including Google sign-in tokens
Stripe, Inc.	Online and in-store payments	Card details (collected by Stripe), email, amount
Resend, Inc.	Sends email	Your email address and name, and the email’s content
Google LLC	Sign-in (only if you choose Google)	See Section 3

[ATTORNEY REVIEW] Confirm Data Processing Agreements (or the provider’s standard DPA) are in place with each provider, and note where each one stores data. Neon’s region is set when a project is created. Check it in the Neon console.

We may also disclose information for legal and safety reasons, or in a business transfer, as described in Sections 5.2 and 5.3 of the general Privacy Policy.

6. How we protect uploaded files

• Files are stored in a private storage bucket with no public access.
• Files are opened only through links that expire after 10 minutes, and only by the customer who sent them or by FundedYouth Shop staff.
• All traffic uses HTTPS.

If you mark a file as private or personal, we won’t share or show it outside of fulfilling your request.

[ATTORNEY REVIEW] Decide whether FundedYouth ever wants to photograph finished prints for social media or the website. If so, add a separate opt-in. The draft above assumes it doesn’t happen without the customer’s permission.

7. How long we keep information

• Model files and photos you upload are deleted automatically 1 day after upload, whether or not the request was submitted. If we need a file again (for example, for a reprint), we’ll ask you to send it again.
• Unfinished request drafts are replaced when you start a new request.
• Request and payment records (what was ordered, price, payment status) are kept for [ATTORNEY REVIEW — PROPOSED 7 YEARS] for tax and accounting.
• Account information is kept until you delete your account (Section 8).
• Sign-in sessions expire on their own.
• Server logs are kept by Cloudflare for a short period under its standard settings.

8. Deleting your account

To delete your Shop account, email [email protected] from the address on the account, with the subject line “Delete my Shop account.” We’ll confirm it’s you, then delete:

• Your account, sign-ins (password and Google), and sessions
• Your print requests and their timelines (uploaded model files and photos are already deleted 1 day after upload)

We may keep the payment records we must keep by law (Section 7), and Stripe keeps its own payment records under its own policy. Emails already sent can’t be recalled. If you have a request that’s paid but not finished, we’ll talk with you about it before deleting.

[ATTORNEY REVIEW] Decide whether to add a “Delete my account” button in the Shop. Deletion by email is acceptable, but a button is easier for customers.

9. Your rights

You can ask to see, correct, or delete the information we hold about you, as described in Section 7 of the general Privacy Policy. California residents have the CCPA/CPRA rights listed there. Email [email protected].

10. Children

You must be at least 13 years old to use shop.fundedyouth.org. The Shop is not directed at children under 13, and we don’t knowingly collect personal information from children under 13 through the Shop. If you believe a child under 13 has given us information through the Shop, contact [email protected] and we’ll delete it.

11. Changes to this Notice

We’ll post any changes on this page and update the “Last updated” date. For material changes, we’ll also email account holders at least [ATTORNEY REVIEW — DEFAULT 30 DAYS] before the change takes effect.

12. Contact us

FundedYouth 415 Parkway Plaza, Suite 519 El Cajon, CA 92020 Phone: (619) 728-5002 Email: [email protected]

EIN 93-4090260 · 501(c)(3) Nonprofit