Privacy policy
We collect as little as we can. We never keep records about children's learning or progress. This page explains what we do collect, why, and your choices.
Last updated:
In short
- We don't have accounts, and we don't store your name, email address or card details in our order records. Our payment provider, Stripe, holds those.
- If you buy a personalised file, we use the child's first name only to make that file. We keep the finished file encrypted so you can download it again. We delete guest-order files after 12 months.
- We never send a child's name to Stripe, to email, or to analytics or logs.
- We don't use advertising, analytics or tracking cookies. We don't sell personal information.
- You can ask us to show, correct or delete your information at support@pulsarcraft.com.
Who we are
PulsarCraft is run by Dematahera Gamage Saumya Jeewantha Wickramasinghe, ABN 12 181 108 303, of 2509 Astoria Blvd Ste 1 #1192, Astoria, NY 11102, USA. We're responsible for the personal information described here. We follow the Australian Privacy Principles in the Privacy Act 1988.
For anything about your privacy, email support@pulsarcraft.com.
What we collect and why
| When | What | Why |
|---|---|---|
| You visit our site | Our host, Cloudflare, receives your IP address, browser details and the addresses of the pages you open, as every website host does. It also tells us your country. On most pages, Cloudflare Web Analytics also measures how quickly the page loads in your browser. | To run and protect the site, to stop abuse, and to show prices in your currency. We don't store your country from a visit. Web Analytics gives us visit counts and page speed only: it sets no cookies, doesn't follow you to other sites, and never runs on order, checkout or admin pages. |
| You buy | Stripe collects your name, email address, billing address and payment details. We receive and keep only Stripe's reference numbers for your order and payment, what you bought, the amounts, and your billing country. | To take payment, deliver your order, send your receipt and tax invoice, handle refunds and disputes, and keep the tax records the law requires. The billing country is our evidence for GST and tells us whether we can sell to you. |
| We email your order link | We look up your email address from Stripe when we send it. We don't keep a copy. | To send you the link to your files. |
| You download a file | The order, the file and the time. | To help if a download goes wrong, and as evidence if a payment is disputed. |
| You buy a personalised file | A child's first name, and any second line of text you add. | Only to make your file. See Children's first names. |
| You email us | Your email address and whatever you write to us. | To answer you and keep a record of what we agreed. |
We don't ask for surnames, birthdays, photos, school names, grades, or records of a child's learning or progress. We don't use your information for advertising, and we don't send marketing emails.
Children's first names
We use this name only to make your sheet.
The only thing we ask for about a child is their first name, to make a personalised file. A personalised poster can also have an optional second line of your own words, which we treat in exactly the same way as the name. Here's what happens to them.
- Before you pay, you type the name on our site and see it on a small preview. The name stays in your browser until you've paid. It isn't sent to us, to Stripe or to anyone else before then.
- Straight after payment, your browser sends the name to us once, so we can make your file. We keep it, encrypted, only until the file is made. That normally takes seconds. If something goes wrong, we keep it for at most 7 days, then delete it and ask you to type it again. Once the file is made, we delete the name.
- We never keep the name as separate text. We never show it in your order history or our emails, and never send it to Stripe or to any analytics or logs. It's never part of a web address.
- We keep the finished file, encrypted, so you can download it again. The file contains the name. Only our system can unlock it, and only to send it to you.
- We delete the file 12 months after it's made, for orders without an account (we don't have accounts yet). While we still offer that design, you can make the file again by typing the name on your order page.
- You can ask us to delete a file sooner. Email support@pulsarcraft.com with your order number. We hide the file straight away. For 30 days we can restore it if you change your mind, and then it's destroyed for good. While we still offer that design, you can make it again later by typing the name.
Please only type a child's name if you're their parent or carer, or you teach them. If you write a child's name in an email to us, it stays in our support mailbox. See How long we keep it.
Children and our site
Our site is for adults: parents, carers and teachers. Children shouldn't buy from us or send us personal information. We don't knowingly collect personal information from a child. If you think a child has sent us their details, please tell us and we'll delete them.
A child's first name reaches us only when an adult types it to make a personalised file. We treat it with extra care, as described above. Australia's new Children's Online Privacy Code is due by 10 December 2026, and we'll review this policy against it.
Where your information is held
Some of our providers hold information outside Australia:
- Stripe: the United States and other countries where Stripe operates.
- Resend: the United States.
- Cloudflare: its global network. Your visit is handled by a data centre near you. We chose Cloudflare's Oceania region to store our records and files, but Cloudflare may still handle them outside Australia, for example to deliver a download to you.
- Google Workspace: Google's data centres in the United States and other countries.
- Anthropic: the United States.
We choose providers with strong security and privacy commitments, and we use their data protection terms. We take reasonable steps to make sure they handle your information in line with the Australian Privacy Principles.
How long we keep it
| Information | How long |
|---|---|
| A child's name while your file is being made | Encrypted, and deleted once the file is made: at most 7 days |
| Personalised files (encrypted) | 12 months after they're made, or sooner if you ask. A deleted file can be restored for 30 days, then it's destroyed. |
| Order records and the download history | Kept for 5 years after the purchase, as Australian tax law requires, then deleted |
| Checkouts that were never paid | 30 days |
| Support emails | Up to 2 years, then we clear them |
| Site logs (Cloudflare) | About 7 days, for running and protecting the site |
| Payment details (Stripe) | As set out in Stripe's privacy policy and the law |
How we protect it
- Our site uses HTTPS, so information is encrypted on the way to us.
- Personalised files are encrypted (AES-256) while they're stored.
- Your order page has a long, unguessable address. Please keep it private, because anyone with it can download your files.
- Only the people who run PulsarCraft can reach our admin tools, and they must sign in through a protected gateway to do so.
- If a data breach is likely to cause serious harm, we'll tell the people affected and the Office of the Australian Information Commissioner, as the law requires.
Access, correction and deletion
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, including a personalised file. Email support@pulsarcraft.com with your order number. There's no charge.
- We'll check it's your order before we act, for example by replying to the email address you used to buy.
- Please don't send us a child's name to identify an order. Your order number is enough.
- We'll reply within 30 days.
- If we delete a personalised file, we can restore it for 30 days, then it's destroyed. We may need to keep order records for tax law, but we'll tell you if so.
- We can also delete the customer record Stripe keeps in our Stripe account for your purchase. Stripe may keep some payment records itself, as the law requires.
If you live in New Zealand, Canada or the United States, you may have similar rights under your local privacy law. Contact us in the same way.
Complaints
If you're worried about how we've handled your information, please email support@pulsarcraft.com first. We'll look into it and reply within 30 days.
If you're not happy with our answer, you can complain to the privacy regulator:
- Australia: the Office of the Australian Information Commissioner (OAIC), oaic.gov.au, phone 1300 363 992.
- New Zealand: the Office of the Privacy Commissioner, privacy.org.nz.
- Canada: the Office of the Privacy Commissioner of Canada, priv.gc.ca.
Changes to this policy
We'll update this policy when what we do changes, for example if we add accounts or a waiting list. The date at the top shows the latest version. If a change affects information we already hold, we'll explain it here before it happens.