Privacy Policy
Last updated: October 2026
This policy explains what personal information ThreadType collects, why, and the choices you have.
What we collect
- Account details: your name (if you give it), email address and a securely hashed password.
- Orders: the design settings you chose (text, font, size, colours and so on), the files we generated, order and payment status, and the email address the files were sent to.
- Details we receive from Paddle: because Paddle is our Merchant of Record, it passes us the details needed to fulfil and support your order, such as your name, email address, country and the order itself. We never receive your full card number.
- Messages: anything you send through the Contact form or by replying to our emails, along with your name and email address.
- Technical data: your IP address and basic request details, used to prevent abuse and rate-limit the service; and a cookie that counts free previews for visitors without an account.
Paddle and your payment data
Payments are handled by Paddle.com Market Ltd and its group companies ("Paddle"), who act as the seller of record. Paddle collects and uses your payment details, billing address and tax information as an independent data controller, under its own privacy policy (paddle.com/legal/privacy). We do not store your card details, and we only use the information Paddle passes to us for order fulfilment, order processing, fraud prevention and customer support.
How we use it
- to create your account, verify your email and sign you in;
- to generate your designs, deliver your files and send order emails;
- to give support and handle refunds with Paddle;
- to keep the records we are required to keep;
- to protect the service from spam, fraud and abuse.
We do not sell your personal information and we do not use it for advertising.
Cookies
We use only the cookies the site needs to work: a sign-in session cookie, and a small cookie that tracks the daily number of free previews. We do not use advertising or analytics trackers. Because these cookies are essential, there is nothing to switch off, but you can clear or block them in your browser (you will then be signed out). Paddle's checkout may set its own cookies; see Paddle's privacy policy.
Who we share it with
- Paddle, to process your order, payment and any refund.
- Email delivery: the email service we use to send verification codes, order emails and replies.
- Hosting and security: our hosting provider and Cloudflare, which carries traffic to the site and helps protect it.
- Authorities, if we are legally required to.
These providers handle data under their own privacy policies. We do not share your data with anyone else.
How long we keep it
We keep account and order information for as long as your account exists and as long as needed for accounting, tax and dispute purposes. Contact messages are kept for as long as needed to handle your request. You can ask us to delete your account and data (see below).
Security
Passwords are stored hashed, sessions use secure HTTP-only cookies, traffic is encrypted over HTTPS and administrator access is protected by two-factor authentication. No system is completely secure, so please use a strong, unique password.
Your rights
Depending on where you live (for example under the GDPR or UK GDPR), you can ask us to access, correct, export or delete the personal information we hold about you, or object to how we use it. Use the Contact page and we will respond within a reasonable time. For data Paddle holds about your payment, contact Paddle directly. We may need to keep some records (such as order history) where the law requires it.
Children
ThreadType is not directed at children under 16, and we do not knowingly collect their information.
Changes
If we change this policy we will update the date above. Material changes will be highlighted on the site or by email.
Contact
Privacy questions or requests: use the Contact page on the site, or reply to any of our order emails.