Privacy policy

Optional visitor analytics and recordings

Optional analytics follows the cookie banner. In the EEA, UK and Switzerland it runs only after you accept. Elsewhere it runs unless you turn it off in cookie settings. With it, GA4 reports traffic and acquisition, PostHog EU stores behavioral events, and Rolly stores anonymous browser and session identifiers, first and last observed times, acquisition and approximate location. Session recordings follow their own rules, described under Data we collect. Global Privacy Control turns off recordings and Rolly visitor history.

A purchase session may be linked to its customer record privately in Rolly. This is not proof of identity and does not identify later shared-browser visits or other devices. Names, email addresses, entered design text, logos and artwork are not sent as analytics event properties. Session recordings are different: a replay shows the page as the visitor saw it, including its text, what they type into forms, images, uploaded logos and the Designer canvas. Passwords are always masked, and private pages, the contact form and payment pages are not recorded. Network bodies and console contents are not recorded.

Recordings are retained for 30 days, identifiable history for up to 12 months, anonymous daily counts for 24 months and temporary delivery records for 24 hours. The optional visitor cookie lasts up to 180 days, and sessions end after 30 minutes of inactivity. Withdrawal clears optional identifiers and queues deletion of the current browser’s Rolly/PostHog history, preserving required order records. Contact support@rollyme.com for access or deletion requests. Provider deletion may take time.

Search Console supplies available aggregate Google queries and rankings, never individual search histories. Consent refusal, blockers, cleared storage, multiple devices and free-plan limits create coverage gaps. We do not fingerprint visitors, build advertising audiences or fabricate missing history. See the cookie policy for current providers and controls.

1. Data controller

The controller of your personal data is Web Window OÜ, a private limited company registered in Estonia (registry code 17163769), Maakri tn 19/1, Kesklinna linnaosa, 10145 Tallinn, Harju maakond, Estonia (the “Operator”, “we”). We operate the Rolly store at rollyme.com.

For any privacy question or request, contact us at support@rollyme.com.

2. Scope

This policy covers personal data processed when you browse rollyme.com, place an order, or contact us, wherever you are in the world. We apply the EU General Data Protection Regulation (GDPR) as our baseline standard for all customers, not only those in the EU.

3. Data we collect

Order data: your name, email address, phone number, billing and shipping address, order items, payment status and order history. You enter payment and address details on Stripe’s hosted checkout. We receive the details needed to prepare, invoice and deliver your order. Your full card number stays with Stripe.

Contact details you give us for artwork: any of email, Instagram, Telegram or WhatsApp that you type into the product page or cart, so we can send your proof on whichever one you actually read. You choose which, and none of them is required to browse.

Messages you send us: the contact and business-quote forms collect your name, email, company name (optional), and message. If you reach out on WhatsApp or Telegram, we see the profile details and messages you choose to share there.

Artwork you submit: logos, design layouts and files you upload for engraving, together with the proof revisions we prepare and your approval or change requests.

Newsletter signup: when you choose to subscribe, we store your email, the consent wording, signup source and time, and any welcome discount and redemption record. The signup is optional. Each newsletter email includes an unsubscribe link. Using it stops newsletter updates while keeping order, proof and delivery emails available.

Saved carts: when you provide an email and cart recovery is enabled, the site can send your cart contents and contact details to our server before checkout. This lets us recover an unfinished cart and, when enabled, send a cart reminder. A cart reminder includes an opt-out link.

Technical data: our hosting provider uses request information, including your IP address and browser, for site delivery, approximate location, security and reliability. Approximate country helps set the initial currency and delivery destination.

Visit history, only if you allow analytics cookies: which pages of the shop you open, how long you actively spend on each, and when you add to the cart, open the designer, start checkout or pay, with the approximate location and device of the request. It never includes what you type. It is linked to your email once you enter one in the cart, check out or pay, so we can see how you found and used the shop. The cookie policy explains how to turn it off.

Session recordings: replays of how you move through the shop, and where people click, made with PostHog. In the EEA, UK and Switzerland they run only if you allow them in the cookie banner, and in the United States only if you click Allow recordings. Elsewhere they run with analytics unless you turn them off in cookie settings. A replay shows the page as you saw it, including its text, what you type, images and uploaded logos. Passwords are always masked, and the contact form, payment and order pages are never recorded. A recording can be linked to your visit history for the same visit.

Order and cart context: when you place an order, or leave items in your cart after giving us an email address, we record the approximate country and city, the device type, the browser and the operating system that the request came from. We use it to support you when something goes wrong with an order, to investigate fraudulent or disputed payments, and to understand which devices the store needs to work well on. It is derived from your IP address and your browser's own user-agent string, not from any tracking script, and it is never used for advertising or sold to anyone. Approximate location is exactly that: a VPN or a company network will show where the connection left, not where you are.

4. Payment details and customer accounts

We do not see or store your full card number. Stripe handles payment details. We do not use advertising trackers.

You can log in to see your orders with your email address and a one-time code we email to you. The code works once, for 10 minutes, and no password is ever stored. We keep the code only in scrambled form with your email address, and delete it when it is used or replaced, or within a day after it runs out. For each logged-in browser we keep a record of the login: your email address, whether it began with a code or a purchase, when it started, when it was last used, and a scrambled form of the random key that keeps that browser logged in. We delete it when you log out, when you log out on all devices, or when you ask us to delete your data. A login that goes unused for 400 days ends by itself. When you pay for an order and the payment goes through straight away, the browser you paid from is logged in to the email on that order, so anyone using that browser can see your orders and delivery details until you log out. If you save a delivery address or contact details in your account, we keep them until you change them or ask us to delete your data. Your next checkout starts with the saved address and phone number. If you choose to, we also put them on your orders that have not shipped yet.

5. Purposes and legal bases

Performance of a contract (GDPR Art. 6(1)(b)): processing your order, preparing and approving proofs, producing and shipping your items, sending order confirmations and tracking emails, and answering your support requests.

Legal obligation (Art. 6(1)(c)): keeping invoices and transaction records required by Estonian accounting and tax law.

Legitimate interests (Art. 6(1)(f)): preventing fraud and abuse, securing the site, keeping records needed to handle support and defect claims, and helping with incomplete orders. Outside the EEA, UK and Switzerland, analytics and session recordings that start on without a banner rely on this basis, and you can object at any time in cookie settings. Optional analytics is governed by the current choices described in our cookie policy.

Consent (Art. 6(1)(a)): optional newsletter signups and consent-based analytics and recordings. Newsletter consent is separate from your artwork contact details. You can withdraw consent without affecting earlier processing. See the cookie policy and the contact details below.

6. Who receives your data

We use service providers to run the store. Stripe handles payments and checkout. Our hosted store database keeps orders, contacts, subscriptions and saved carts. Resend sends email. Vercel hosts the website and measures its performance. Cloudflare provides DNS and artwork storage. Google provides analytics. Omniva or other delivery partners handle shipping. The carrier receives the name, address and contact details needed to deliver your parcel. If you choose a messaging app for support, that provider also handles the messages.

We disclose data to public authorities only where the law requires it. We never sell or rent your personal data to anyone.

7. International transfers

Service providers may process data outside the EU/EEA. The applicable provider agreements and transfer safeguards govern that processing. Contact support@rollyme.com for information about the providers and safeguards used for your data.

Artwork and proof files are kept in private storage. They are available to the people and services handling your order through controlled access, rather than a public file listing.

8. How long we keep data

Invoices and supporting transaction records are kept for seven years from the end of the relevant financial year. We also keep order, contact, proof and payment-reference records in our own store database to fulfill orders and handle support and claims. Stripe keeps its payment records under its own retention rules.

Visit history is deleted 12 months after your last visit, or as soon as you withdraw analytics consent.

Session recordings are kept by PostHog on its EU servers for up to 30 days.

Other correspondence, artwork, saved carts and subscription records are kept while needed for their stated purpose or a related legal requirement. Contact us to request deletion or to ask about a particular record. We may retain the minimum information needed to honor an email opt-out or meet an accounting obligation.

9. Your rights (GDPR)

You may ask us at any time to access, correct, export or erase your personal data, to restrict or object to its processing, and to withdraw any consent you have given (without affecting processing before withdrawal). Email support@rollyme.com and we will respond within one month.

You also have the right to lodge a complaint with a supervisory authority, in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or the authority in your own EU country.

10. Customers in the United States

We do not sell or share personal information as those terms are defined in US state privacy laws (such as the CCPA/CPRA), and we do not use it for cross-context behavioral advertising. US customers may exercise the same access, correction and deletion rights described above by emailing support@rollyme.com.

11. Cookies and site storage

We use cookies and browser storage for your cart, contact details, design draft, preferences and login. Optional analytics follows the consent rules and providers described in the cookie policy. The Cookie settings button on the cookie policy page lets you review or change that choice without deleting your cart. See rollyme.com/legal/cookies for details.

12. Changes and contact

We may update this policy as the store or the law changes. The current version is always published on this page with its “last updated” date. Material changes will be highlighted here.

Questions about this policy or your data: support@rollyme.com, or by post to Web Window OÜ, Maakri tn 19/1, Kesklinna linnaosa, 10145 Tallinn, Harju maakond, Estonia.