Privacy Policy

Effective date: 2026-07-13 · Version 1.0

Company: Crater Ink Studios LLC (a Pennsylvania limited liability company), which operates the Why Stationery marketplace. Address: 4934 Swamp Rd, Felton, PA 17322, USA. Applies to: everyone who uses Why Stationery — buyers, sellers, and visitors. Region: United States only.

This Privacy Policy explains what personal information we collect on Why Stationery, how we use and share it, and the choices and rights you have.

---

1. Scope

This policy covers personal information we handle when you use the Why Stationery website, tools, and services (the "Service"). Why Stationery serves the United States only. This policy does not cover the independent shops' own separate handling of your information once we pass it to them to fulfill an order, or third-party sites we link to.

2. Information we collect

Information you give us:

• Account information — your name, email address, password (stored in hashed form), and, for sellers, shop name, brand details, and payout/onboarding information provided through Stripe.
• Order information — the items you buy or sell, order totals, shipping address, order status, and the acknowledgments you make at checkout (including the date and the version of the policy text you saw).
• Custom-order content — the artwork, logos, photos, text, and personalization details you upload or enter for a custom order, and the previews and proofs generated from them.
• Messages — communications in order threads and any messages you send us for support.
• Marketing preferences — your choices about email and other communications.

Payment information. Payments are processed by Stripe. Stripe collects and processes your card or payment details directly; we do not receive or store your full card number. We receive limited payment metadata such as a confirmation, the amount, and a token or last-four/brand needed to identify a transaction, refund, or payout.

Information we collect automatically. When you use the Service we collect usage and device information such as IP address, browser and device type, pages viewed, referring pages, and interactions, through cookies and similar technologies. See the Cookie Policy for details.

We do not intentionally collect sensitive categories of personal information (such as government ID numbers, health, or biometric data) beyond what a payment or tax process requires through Stripe. Please do not upload such information in custom-order content.

3. How we use information

We use personal information to:

• provide the Service — create and manage your account, show and generate designs and proofs, process orders, and route payments and seller payouts;
• enable fulfillment — share the information a shop needs to make and ship your order;
• communicate with you — send order updates, service notices, support responses, and, where permitted, marketing (see Section 7);
• support disputes and protection — mediate order problems, respond to chargebacks, and keep the order record (thread, proofs, acknowledgments) as evidence;
• maintain safety and integrity — detect and prevent fraud, abuse, and policy or legal violations, and secure the Service;
• improve the Service — understand usage and develop features; and
• meet legal obligations — including tax collection and remittance as a marketplace facilitator, and responding to lawful requests.

4. How we share information

We share personal information only as described here:

• With shops, to fulfill orders. When you buy, we share the order details a shop needs to make and ship your item (your name, shipping address, order and personalization content, and order messages). Shops are contractually required to use this information only to fulfill your order and not for their own marketing.
• With Stripe. For payment processing, seller payouts, and related fraud and tax functions, under Stripe's terms and privacy notice.
• With service providers. Vendors that host, operate, secure, analyze, or support the Service, under agreements that limit their use of the information to those services.
• For legal and safety reasons. As described in Section 5.
• In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction, subject to this policy.
• With your consent, or at your direction.

We do not sell your personal information for money. Section 11 explains how US state privacy laws treat certain data sharing (including any "sale," "sharing," or targeted advertising) and how to opt out.

5. Law enforcement and legal requests

We may access, preserve, and disclose personal information to courts, law-enforcement agencies, regulators, or other parties when we reasonably believe it is required by a valid subpoena, court order, warrant, or other lawful request, or when disclosure is necessary to comply with the law, enforce our Terms and policies, collect amounts owed, protect the rights, property, or safety of Why Stationery, our users, or the public, or investigate fraud or a security issue.

Where we are legally permitted and it is reasonable to do so, we will review requests for validity and scope, object to or narrow overbroad requests, and notify the affected user before disclosing their information — unless we are legally prohibited from doing so or notice would be counterproductive (for example, an emergency involving a risk of harm).

6. Cookies and similar technologies

We use cookies, local storage, and similar technologies for essential, functional, and analytics purposes. What each category does and how to control it is described in the Cookie Policy, which is part of this Privacy Policy.

7. Marketing emails and CAN-SPAM

If you receive marketing email from Why Stationery, it will comply with the US CAN-SPAM Act:

• every marketing message identifies who it is from and includes our physical mailing address, Crater Ink Studios LLC, 4934 Swamp Rd, Felton, PA 17322, USA;
• where required, a marketing message is clearly identifiable as an advertisement; this identification is not required for a message you receive because you gave prior affirmative consent, such as a newsletter you asked us to send;
• every marketing message includes a clear one-click unsubscribe link;
• we honor unsubscribe requests promptly (within 10 business days); and
• we do not use false or misleading headers or subject lines.

Unsubscribing from marketing does not stop transactional and service messages — order confirmations, shipping updates, security and account notices, and policy changes — which we send as part of providing the Service.

8. Data retention

We keep personal information for as long as needed to provide the Service and for the purposes described here, then delete or de-identify it. In particular:

• Account information is kept while your account is active and for a reasonable period afterward.
• Order records and acknowledgments are kept as long as needed to complete the order and to handle returns, disputes, chargebacks, and tax and accounting obligations.
• Custom-order uploads and proofs are kept as long as needed to fulfill and support the order, and are removed within a reasonable period after the order is complete or your account is deleted, except copies we must retain to meet a legal obligation or resolve a dispute.

Where a longer period is required by law (for example, tax records), we retain information for that period.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information — including encryption in transit, access controls, and use of a PCI-compliant payment processor (Stripe) so that full card data does not reach our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please protect your account credentials and notify us of any suspected compromise.

10. Children's privacy (COPPA)

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has given us personal information, contact us at the address in Section 14 and we will delete it. You must be at least 18 to use the Service (see the Terms of Service).

11. US state privacy rights (CA, CO, CT, VA, UT and other states)

Depending on where you live, US state privacy laws — including the California Consumer Privacy Act as amended (CCPA/CPRA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Virginia Consumer Data Protection Act (VCDPA), the Utah Consumer Privacy Act (UCPA), and comparable comprehensive consumer-privacy laws in states such as Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Indiana, Tennessee, Minnesota, and Maryland, together with any other state with an applicable consumer-privacy law — may give you the rights described below with respect to your personal information, to the extent that state's law applies to us.

Your rights may include:

• Access / know — to know what personal information we have collected about you, the categories, sources, purposes, and the categories of parties we share it with, and to get a copy.
• Correction — to correct inaccurate personal information.
• Deletion — to ask us to delete personal information we collected from you.
• Portability — to receive a copy of certain information in a portable format.
• Opt out — to opt out of any "sale" or "sharing" of personal information and of "targeted advertising" and certain profiling, to the extent those activities apply.
• Non-discrimination — we will not deny service, charge a different price, or provide a different quality of service because you exercised these rights.

"Sale," "sharing," and targeted advertising. We do not sell your personal information for monetary consideration. To the extent our use of analytics or advertising cookies is treated as a "sale," "sharing," or "targeted advertising" under these laws, you may opt out using the controls in the Cookie Policy or the request methods below. We also honor a recognized browser opt-out signal (such as Global Privacy Control (GPC)) where required.

Sensitive information. We do not use or disclose sensitive personal information for purposes that require a right to limit under these laws.

How to exercise your rights. Submit a request by email to hello@craterinkstudios.com or by mail to the address in Section 14. We will verify your request by matching it to information in your account (and may ask for additional confirmation). You may use an authorized agent to submit a request on your behalf with proof of authorization. We respond within the time the applicable law requires (generally 45 days, extendable where permitted).

Appeals. If we decline your request and your state's law provides an appeal right (for example, Colorado, Connecticut, and Virginia), you may appeal by replying to our decision or writing to the address in Section 14; we will respond within the time the law requires. If your appeal is denied, you may contact your state Attorney General.

California "shine the light." California residents may ask whether we disclosed personal information to third parties for their own direct marketing in the prior year; we do not share personal information for that purpose.

12. Your choices and controls

• Account details — review and update your account information in your settings.
• Marketing — unsubscribe from marketing email at any time (Section 7).
• Cookies — manage cookies and tracking through the controls in the Cookie Policy and your browser.
• Deletion — request deletion of your account and associated personal information as described in Sections 11 and 14, subject to information we must keep for legal, tax, or dispute reasons.

13. Changes to this policy

We may update this Privacy Policy. When we do, we will change the Effective date above and, for material changes, provide reasonable notice. Continued use of the Service after changes take effect means you accept the updated policy.

14. Contact

For privacy questions or to exercise your rights:

Crater Ink Studios LLC — Why Stationery Attn: Privacy 4934 Swamp Rd, Felton, PA 17322, USA Email: hello@craterinkstudios.com