PRIVACY POLICY

CUSTOM32 respects your privacy. This policy explains what personal information we collect, how we use it, which third parties process it on our behalf, and your choices. We operate custom32.com for customers in Canada.

We collect information you provide when you create an account, customize products, checkout, contact support, or submit a design inquiry.

• Account and profile: email, display name, first and last name, phone (optional), branded account ID, and authentication identifiers from Firebase Auth.

• Checkout and orders: cart contents, design approvals, order totals, promo codes, payment status, fulfillment status, and timestamps (including terms acceptance at checkout).

• Shipping and contact: name, email, phone, and Canadian shipping address collected through Stripe Checkout (and stored on your order for fulfillment).

• Support and inquiries: design-service form submissions (name, email, message, project type, optional attachment references) and inbox chat messages you send to our team.

Because our products are made to order, we store the design configuration you approve before payment so we can manufacture, email receipts, and support reorders.

• Social-handle decals: platform icon choice, handle text, text casing, style (default, boxed, two-color), font and weight, width, letter spacing, icon scale and gap, material selections, and quantity.

• Custom graphics: artboard dimensions, element layout (position, size, rotation), text content, font settings, imported SVG source data, filenames, and material assignments.

• Windshield banners: custom text, width, material, and quantity.

• Shop and cart lines: product selections, sizes, materials, styles, preview references, unit pricing, and design approval summaries.

• Signed-in customers: after payment, custom line items may be copied into your saved designs library linked to the source order.

We use trusted service providers to operate the store. They process data only as needed to perform their services.

• Stripe — Our secure payment processor. Stripe collects contact details, billing and shipping address, and phone number at checkout, calculates applicable Canadian sales tax (GST/HST), and processes card payments. Payment card numbers are handled entirely within Stripe's PCI-compliant environment; CUSTOM32 does not store full card numbers on our servers.

• Resend — Our transactional email provider. Resend delivers account verification codes, order confirmations, receipts, invoices, shipment updates, password and account notices, and related service emails to the addresses you provide.

• Google Analytics (GA4) — We use GA4 site-wide to understand traffic patterns, page views, and navigation across custom32.com. GA4 may set its own cookies or identifiers according to Google's policies.

• Firebase / Google Cloud Platform — Our primary infrastructure for authentication, database (Firestore), and file storage. Account, order, design, and operational data are hosted in Google Cloud.

CUSTOM32 does not set first-party marketing cookies. We use browser storage to preserve your experience between visits:

• localStorage — Guest cart items (`custom32-cart-v1`), social-handle customizer state (`guestDecalDesign`), custom graphics editor state (`guestCustomGraphicsDesign`), and email-link sign-in helper (`custom32-email-for-sign-in`). Guest design keys are cleared after a successful purchase.

• sessionStorage — Checkout progress (`custom32-checkout-resume`), dismissed site banner ID, and short-lived customizer session flags.

• Firebase Auth — The Firebase SDK may persist your sign-in session using browser storage mechanisms managed by Google.

We use personal information to process orders, manufacture custom products, calculate tax, send transactional communications, provide account features, prevent fraud and abuse, respond to support requests, and improve our services.

We do not sell your personal information.

We share data with the processors listed above and with shipping carriers only to the extent needed to deliver your order. We may disclose information when required by law or to protect our rights, customers, and platform integrity.

When you request account deletion from your customer portal, we delete your Firebase Authentication record, Firestore user profile, saved designs, and email verification codes associated with your account.

Order history, payment records, and fulfillment details tied to completed transactions are retained after account deletion for legal, tax, accounting, and dispute-resolution purposes. Those records may still contain your email, shipping address, and approved design specifications from the time of purchase.

Design inquiry submissions, admin operational notes, and chat history may be retained according to our support and business record needs.

We apply technical and organizational measures appropriate to our size and scope, including authenticated API routes, Firestore security rules, server-side order processing, and Stripe-hosted checkout. No method of transmission or storage is completely secure.

You may request access, correction, or deletion of account-related data by contacting INFO@CUSTOM32.COM, subject to legal and operational requirements (including retained order records described above).

Canadian privacy laws may provide additional rights depending on your province of residence.

Privacy questions or requests: INFO@CUSTOM32.COM.

CUSTOM32 — custom automotive decals — custom32.com