Privacy Policy

Last updated: November 2, 2026

SaraPalooza Designs, trading as Sarapalooza ("we," "us," or "our"), is an online retailer based in Russellville, Arkansas, United States, operating sarapalooza.com. This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information we collect

When you use the design studio, place an order, or contact us, we collect the information needed for that activity:

• Name, email address, and shipping address
• Payment card details — processed and stored exclusively by Stripe, Inc. We never see or store your full card number.
• Personalization details you enter (names, dates, fonts, colors) to fulfill your custom order
• Photos and artwork you upload, saved designs and their revisions, and the product and variant you select
• Your email address for email-code sign-in to private saved designs, plus session and security records
• Order history and correspondence with our support team
• Email address if you request our checklist or sign up for email updates (optional)
• A one-way hash derived from your IP address for short-term signup abuse prevention
• Basic device, browser, approximate location, referral source, and site-interaction data collected by Google Analytics

We use essential cookies and browser storage for sign-in, security, your shopping cart, and wishlist. Optional Google Analytics and first-party shop activity measurement wait until you accept Analytics. You can choose Accept all, Reject optional, or Customize, and reopen Cookie settings at any time. Rejecting optional cookies does not block sign-in, carts, checkout, saved designs, or wishlists. The essential ra_cookie_consent cookie remembers your choices for up to 180 days. With Analytics accepted, a session-only store_crm_sid cookie links public page views, product views and reported cart activity; signed-in shop activity may be associated with your account in our private CRM. We do not record private design pages, artwork, IP addresses or browser fingerprints in shop activity events. Google Analytics uses its own measurement cookies. Partner-referral storage is optional and controlled separately where used. These choices do not subscribe you to marketing email. Withdrawing Analytics stops future optional measurement and removes our analytics cookies; accounting and order records remain. If you follow an affiliate link, the destination retailer or affiliate network may use cookies or similar technology to attribute a qualifying signup or purchase to Sarapalooza.

Saved designs and uploads are not publicly listed. We and the service providers described below process them to provide your design library, requested previews, and orders. If you create a sharing link, a person with that link can view the shared design, or copy it into their own account when you select copy permission. You can revoke the link in your account. Revoking a link stops access through that link; it does not recall a copy that another person already saved. Private editor and shared-design pages do not load Google Analytics.

2. How we use your information

• Process and fulfill your order (including passing shipping details to our fulfillment partners)
• Save your designs, create previews and print files, and provide the sharing permissions you choose
• Send you order confirmations, shipping notifications, and receipts
• Respond to your support requests
• Send a confirmation link when you request the checklist, and marketing emails only after you confirm (unsubscribe any time)
• Measure site traffic, completed purchases, content performance, and affiliate-link engagement
• Prevent fraud and comply with legal obligations

3. Who we share your information with

We share information needed for payment, production, delivery, and the services described below:

• Stripe, Inc. — payment processing. Stripe's privacy policy governs card data.
• PrintDoors, PrintKK, Printful, and Printify / Fulfill Engine — previews, production, and fulfillment, depending on the product. Some previews are generated locally. When you request a supplier-generated PrintDoors preview, we send the rendered artwork to PrintDoors before purchase. For a purchased order, the selected production partner receives the shipping and order details it needs, including approved personalization or print artwork. Production and fulfillment can take place in the United States or overseas. Carriers receive delivery details.
• Google Analytics and Google Merchant Center — public-site performance and purchase-conversion reporting. Purchase events use an order identifier, public product identifiers, quantities, prices, order value, shipping, tax, and currency. We exclude customer email, address and phone, uploaded images, custom personalization text, saved-design IDs, and sharing tokens from those events. Google's privacy policy governs data Google receives.
• Amazon Associates and Awin — affiliate-link attribution after you choose to follow a marked affiliate link. Their respective privacy policies govern activity on their sites and networks.

We do not sell your personal information for money. Some privacy laws may define certain analytics or affiliate disclosures more broadly as "sharing." You can reject optional tracking using Cookie settings or your browser settings; this may reduce attribution or analytics functionality but will not prevent you from browsing or shopping. Optional measurement is skipped when your browser sends a Global Privacy Control or Do Not Track signal. Browser settings and blocking extensions can also prevent measurement.

4. Data retention

We retain order records for a minimum of five years for accounting and tax purposes. Saved designs, uploaded artwork, design revisions, and purchase print files are stored to provide your design library, previews, and order fulfillment. You can request deletion; completed-order and other legally required records may need to be retained. Personalizer sign-in codes expire after 10 minutes. Newsletter confirmation links expire after 24 hours. Confirmed newsletter subscribers are retained until you unsubscribe. Short-term anti-abuse records are used only to limit repeated signup attempts. See Section 6 for contact details.

5. Security

All data is transmitted over HTTPS. Payment processing is handled entirely by Stripe's PCI-compliant infrastructure. Access to stored personalization and order data is limited to authorized systems and operators.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications at any time
• California residents: rights under the CCPA, including the right to know and the right to delete

To exercise any of these rights, email us athi@sarapalooza.com with the subject "Privacy Request." We will respond within 30 days.

7. Children's privacy

This site is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us immediately and we will delete it.

8. Changes to this policy

We may update this policy from time to time. Material changes will be noted with a new "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance.

9. Contact

SaraPalooza Designs
Russellville, Arkansas, United States
hi@sarapalooza.com