Privacy at Tuppy
We need photos and order details to make your figurine. This page explains what we do with them and what choices you have.
Data we process
We process information you provide, including your name, email address, delivery address, pet details and uploaded photos.
We also retain technical order information, your payment status, render choices and revision feedback. We record the events needed to fulfil your order and investigate problems.
To limit abuse of free renders, we set a first-party device cookie and compare protected recognition codes for IP address and device for no more than 30 days. We do not store the raw IP address in the fraud register.
How we use photos
We use your photos only to create personal renders and the approved figurine. Staff and contracted render or production services receive access only when your order requires it.
Photos and renders remain in private storage. Access uses temporary links. We do not publish them as a customer story without separate permission.
Payment and service providers
Stripe processes the payment. We share the order details needed for payment, fraud prevention and refunds. A selected render provider may process photos and instructions to create your initial render or revision.
We block known temporary email providers using a regularly refreshed domain list. If several new accounts appear from the same device or the same email-domain and connection combination, only the free render may be held for review. Purchased credits remain available. An IP address alone never puts an email domain on the block list.
We do not send photo files, storage paths, access links, free-text revision feedback or recognition codes to basic analytics.
Retention and your request
An unfinished draft becomes eligible for deletion after seven days by default. Fraud observations expire after no more than 30 days. Only non-identifying totals may remain longer. Paid orders have a separate retention period so that we can fulfil the order, provide the guarantee, keep accounts and meet legal obligations.
To request access, correction or deletion, use the contact option in your order email. We may need to retain some order and payment details for longer to meet legal obligations.