Privacy notice
STRASSLINE is responsible for the customer account and order information described below. Our business operates from Türkiye and arranges physical production and shipping in the United States. Privacy requests: support@strassline.com
What we collect
You can submit an order request as a guest without registering. We use your email, optional name and an internal order reference to process your request. A private order link or optional email verification lets you access your own orders. Private links are bearer credentials: anyone you share a link with may view that order. They expire after 30 days; you can recover access by verifying your email once email delivery is enabled. A secure cookie remembers authorized access. We do not require a password or social-media account. We store your project specifications, uploaded artwork, order numbers, quantities, color selections, correspondence and payment references. Delivery and billing details will be collected only when needed for a confirmed order. Payment card details must be entered with the approved payment provider; we do not store card numbers
Why we use it
We use this information to provide private order access, prepare quotes and proofs, fulfill orders, show your history, support reorders, respond to requests, prevent misuse and comply with accounting and other legal duties. Depending on applicable law, the basis is steps requested before a contract, contract performance, legal obligations or a balanced legitimate interest in operating and securing the service. Optional marketing requires a separate choice
Storage and access
Project records are kept in the site's database and artwork in private file storage. Access is tied to your authenticated account. Knowing another customer's order number does not grant access. Necessary hosting, payment, production and shipping providers may process only the data needed for their work. Hosting and storage use OpenAI Sites and Cloudflare infrastructure. The prepared email-delivery integration uses Resend when enabled; it receives the destination email and verification message, not your artwork. Information may be processed outside your country, including in the United States. Applicable international-transfer safeguards must be in place before processing customer data internationally
Retention and your choices
We retain artwork and design history while needed to fulfill your requests and support your orders and reorders. You can request deletion when you no longer need this service. Financial records and information required for disputes or legal obligations are retained for the period required by applicable law. We do not promise indefinite artwork availability. Expired sign-in codes cannot be used, and sessions expire after seven days. You may request access, correction, deletion, a copy of your information or other applicable privacy rights by emailing us. We may need to verify your identity. Deletion may be limited by lawful record-keeping obligations
Browser storage and security
Essential sign-in/session technology enables account access. Local browser storage is also used for theme preferences and the existing draft shopping bag. No optional advertising or analytics is added by this release. Essential host and payment-provider technologies may also apply when those services are used. Some pages load fonts from Google Fonts, which receives the connection data needed to serve them. We use account access checks and private file delivery, but no system can promise absolute security
Children and updates
This service is intended for adults placing business or personal orders. Please do not upload unnecessary personal information, identity documents or sensitive data. Material changes to this notice will be dated and communicated where required. Where Turkish privacy law applies, you may exercise the rights under Article 11 of Law No. 6698, including requesting information about processing and recipients, correction or lawful deletion, objecting to adverse automated decisions and seeking compensation for unlawful processing. Contact us first; you may also complain to the Turkish Personal Data Protection Authority (KVKK) or another competent authority where applicable