Privacy

Privacy Policy

Last updated October 23, 2026

Keepsake (“Keepsake,” “we,” “us”), a business of Wonderwell Designs LLC, makes photo ornaments with a private online gallery inside. This policy explains what information we collect when you visit keepsake.gallery, build an ornament, place an order, or open a Keepsake gallery, and what we do with it. We collect only what we need to make, ship and host your ornament. We don’t sell your information, and we don’t use advertising trackers.

What we collect

Information you give us

Photos. The hero photo printed on your ornament and up to 25 photos for its gallery.
Ornament details. The title you give your ornament, how you crop and order your photos, and your optional gift message.
Order and shipping details. The name and mailing address to ship to, and your email address.
Messages. Anything you send us when you email us.

Payment information

Payments are handled by Stripe on its own secure checkout page. We never see or store your full card number. Stripe tells us whether a payment went through and shares limited details such as the amount paid and any discount code used. Stripe’s handling of your payment information is governed by the Stripe Privacy Policy.

Information collected automatically

A session cookie. When you start building an ornament, we create an anonymous session, with no account or password, so your photos and cart stay with you while you build. It’s stored in a cookie in your browser.
Technical logs. Like most websites, our hosting and infrastructure providers automatically record basic technical information when you visit, such as your IP address, browser type and the pages requested. These logs are used to keep the site running and secure.
Gallery visit counts. When a gallery is opened by tapping the ornament or scanning its QR code, we add one to a simple count for that ornament. We don’t record who opened it or from where. The first time it’s opened this way after your order ships, we send you the thank-you email described below.

Photo metadata

Photos taken on phones and cameras often contain hidden metadata, which can include the date, the device and the location where the photo was taken. The copies of your photos shown in your gallery are re-created without this metadata. The full-size original files you upload, which we use to print your ornament, may still contain it. We delete those originals after your order is delivered, as described under “How long we keep it” below.

How we use it

To print and make your ornament, and to set up and host its gallery.
To process your payment and ship your order, including buying a shipping label and tracking delivery.
To send emails about your order: your confirmation, status updates, shipping and delivery notices.
To send you one thank-you email the first time your ornament’s gallery is opened from the ornament after it ships. It may include an offer, such as a discount on a copy of that ornament. Every email like this has an unsubscribe link. Unsubscribing stops these emails but not emails about orders you place. We don’t send newsletters, and we don’t share your email address with anyone for their marketing.
To answer your questions, handle cancellations, refunds and replacements, and provide customer support.
To keep the site secure, prevent fraud and abuse, and fix problems.
To keep business records and meet our legal, tax and accounting obligations.

We will not use your photos in our marketing or show them to anyone outside your gallery without your permission.

Who can see your gallery

Your gallery has its own private web address. It’s built into the ornament’s NFC chip and QR code and appears on your order page. There is no password. Anyone who has the ornament or the link can open the gallery and see its photos and gift message. The address includes a random code so it can’t be guessed, and gallery pages ask search engines not to list them. Only share the link with people you’d want to see your photos. Anyone who can open the gallery can also order additional ornaments that open it, from the gallery’s menu.

From inside a gallery, anyone viewing it can choose to create a separate share link for the photos, and switch that share link off again at any time. When a share link is posted in a messaging app or on social media, that service may display a preview image from the gallery.

Who we share it with

We share information only with the service providers that help us run Keepsake, and only what each one needs to do its job:

Vercel: hosts our website.
Supabase: stores order records, such as your order details, shipping address and email.
Cloudflare: stores your photos.
Stripe: processes payments.
Resend: sends our order emails.
Shippo and the shipping carrier, usually USPS: create shipping labels and deliver and track your package. They receive the shipping name, address and email.
Google Workspace: hosts our email inbox, so it holds anything you email us.

We may also disclose information if the law requires it, to protect our rights or someone’s safety, or as part of a sale or transfer of our business. If content you share with us appears to show evidence of a crime, abuse, or a risk of harm to someone, especially a child, we may report it, along with related order information, to law enforcement or other appropriate authorities, and we will make any report the law requires. If our business is transferred, this policy will continue to apply to your information.

We do not sell your personal information or share it for targeted advertising.

Cookies

We use only the cookies needed for the site to work, such as the session cookie that keeps your ornament and cart together while you build. We don’t use advertising or cross-site tracking cookies.

How long we keep it

Unfinished ornaments. If you start building but don’t check out, we automatically delete the photos and details within about 24 hours. An ornament left in your cart is deleted after about 7 days.
Full-size originals. These are kept until about 7 days after your order is delivered, in case something goes wrong in transit, and then deleted. The exception is the hero photo, which we keep so we can make a replacement print if you ever need one. This only affects the full-size files: the smaller, compressed copies of your photos that your gallery shows (re-created without metadata) stay with your gallery, as described next.
Your gallery. Gallery photos, the title and the gift message are kept for as long as the gallery is available, so your ornament keeps working year after year, unless you ask us to delete them.
Order records. Your name, shipping address, email and order history are kept as long as needed to support your order and to meet tax, accounting and legal requirements.

Your choices and rights

You can ask us to access, correct or delete your personal information, including deleting your gallery and its photos. Email us at info@keepsake.gallery from the address you ordered with. Deleting a gallery is permanent, and the ornament, along with any copies or additional ornaments that open the same gallery, will no longer open anything when tapped or scanned. We may keep basic order records where the law requires it. You can update your gift message any time from the link in your order confirmation email.

Depending on where you live, your state’s law may give you additional rights over your personal information, such as the right to know what we’ve collected or to appeal a decision we make about your request. To use any of these rights, email us. We’ll respond within the time the law requires and won’t treat you differently for making a request.

Photos of other people

Your ornament may include photos of family and friends, and is often a gift for someone else. Please only upload photos you have the right to use, and that the people in them would be comfortable sharing in the way described above. If you appear in a Keepsake gallery and want a photo removed, email us and we’ll help.

Security

We take reasonable steps to protect your information. Connections to our site are encrypted, access to order data is restricted, and photos are stored privately and shown only through temporary links. No system is perfectly secure, though, and we can’t guarantee absolute security.

Children

Keepsake is not directed to children under 13, and you must be 18 or older to place an order. We don’t knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we’ll delete it.

Where we operate

Keepsake is based in the United States, ships only to U.S. addresses, and stores information in the United States and other countries where our service providers operate.

Changes to this policy

We may update this policy from time to time. When we do, we’ll change the date at the top. If we make a significant change to how we use information we already hold, we’ll tell you before it takes effect.

Contact us

Questions or requests about your privacy: info@keepsake.gallery, or by mail at Wonderwell Designs LLC (Keepsake), 161 N Main St, Unit 8B, PMB 141, Dublin, PA 18917.