DraftVano Privacy & Optional Usage Measurement

Product and payment services

DraftVano operates the planning tool and product support. Use the Payhip-hosted contact form for privacy or product questions. Stripe/Link processes website payment details and receipts under its own privacy information; we do not receive or store full card numbers. Payhip and other marketplaces process their own store orders and support submissions.

Cloudflare hosts the website and API and processes network/security information needed to serve requests. Infrastructure providers may process data outside your country under their own contractual safeguards. This notice describes the website's present implementation; it is not a claim that every third-party service has the same retention rules.

Essential order records

To restore the correct paid plan, the checkout can store an opaque reference to the selected dimensions, units, timber profile and options. Stripe receives that reference with the checkout. After a server-confirmed payment, a small operational record stores a keyed order fingerprint, project, timestamp, amount, currency, selected add-on and test/live mode. It records whether the browser reported a completed PDF handoff; this does not prove that a file was saved on your device.

Our order database does not store raw Stripe session IDs, customer email addresses, card details or raw IP addresses. A short-lived keyed rate-limit value is derived from the request IP to protect checkout preparation. It cannot be used to unlock a plan. Operational rows are removed after 90 days by cleanup during subsequent checkout/payment activity; deletion is not promised at an exact second. Stripe retains its own transaction records.

Your private access link

The recovery link contains an encrypted bearer token in the URL fragment. A fragment is not sent with the page's HTTP request. Restoring access sends it to our own API, which rechecks the payment with Stripe. The token expires 30 days after the purchase. Keep it out of public posts and support messages. Rotating the server signing key can invalidate old encrypted links; the original Stripe return link remains a separate recovery route within its validity period.

We do not currently promise an automated DraftVano access email. Stripe/Link sends its transaction communications separately. A future optional transactional mail provider will be identified here before activation.

Optional usage measurement

Optional funnel events are off until you choose “Allow optional usage measurement.” The preference is saved on your device. Each page visit then uses a new random identifier, not a persistent cross-site identity. We record at most one visit, configuration interaction and checkout-open event for that identifier, together with the project category and a broad source such as Pinterest, Google, Bing or direct. We do not send exact dimensions, full referring URLs, search terms, email or private access links in these events.

If allowed, the same visit identifier and broad source can link the prepared checkout to a server-confirmed order. This is consented partial-funnel data, not a complete count of all visitors or a guaranteed human-traffic measure. Test orders are kept separate from live orders. Reloads and repeat payment callbacks do not create additional paid orders.

Choose “Essential only” on the homepage to stop subsequent optional events. This does not delete earlier aggregated records. Optional event rows follow the 90-day operational cleanup window. Cloudflare's separate cookie-free Web Analytics may report visits/pageviews; these are not verified buyers or search impressions.

Device storage and your choices

The builder may use local storage for the pending checkout design, UI settings and measurement preference. Payment entitlement is verified on the server; storage alone does not authorize a PDF. Clearing browser storage removes local preferences but does not cancel a purchase. A saved private recovery card can restore access on another device.

Questions and rights

For access, correction, deletion or other applicable privacy rights, contact DraftVano with the minimum information needed to identify the request. Payment-record requests can also be made to Stripe/Link or the marketplace involved. Do not submit card details or a private download URL. You may raise data-protection concerns with the appropriate supervisory authority, including Belgium's Data Protection Authority.