Privacy
Last updated 4 August 2026
We sell one digital product. We collect the least we can get away with: your email address, what you bought, and a token that opens your copy. There is no tracking on this site, no analytics, and no advertising pixels.
Who we are
Brain Art LLC, 16192 Coastal Highway, Lewes, Delaware 19958, United States. We are the data controller for the information described here. Reach us at support@nofacepotterysales.com.
What we collect, and why
| What | Why |
|---|---|
| Your email address | To send your access link and to find your purchase if you lose it |
| Your name, if you enter one | Optional. Only used to address you. |
| What you bought, the amount and the currency | To know whether you have the add-on, and for our accounts |
| A random access token | The thing your link carries. It is what unlocks your copy. |
| The Stripe session reference | To match a payment to a purchase and to handle refunds |
| Date and time of purchase | To run the guarantee window |
What we never see
Your card number, expiry, security code and billing address go straight to Stripe and are never sent to our servers. We could not show you your own card number if you asked us to.
Cookies
One, and it is strictly necessary. When you open your access link we set a cookie called nfp_access that proves you are allowed into your copy. It holds your purchase reference and whether you own the add-on. It lasts 30 days, it is signed so it cannot be edited, and it is not used to track you anywhere.
There is no analytics cookie, no advertising cookie and no third-party tracker on this site. That is why you are not being asked to accept anything.
Who else touches your data
Only companies we need to run this. Each acts as our processor.
| Who | What for | Where |
|---|---|---|
| Stripe | Taking payment and handling refunds | United States |
| Supabase | Storing the purchase record | Frankfurt, Germany |
| Resend | Sending your access email | United States and Ireland |
| Vercel | Hosting the site and the product | United States |
| Google Fonts | Serving two typefaces | United States |
We do not sell your data, we do not share it for advertising, and we do not add you to anything you did not ask for.
How long we keep it
Your purchase record stays for as long as we are giving you access, which is indefinitely unless you ask us to delete it, because your link is meant to keep working. Payment records are kept for as long as tax and accounting rules require, which is generally seven years. Ask us to delete your record and we will, but be aware that this also switches off your access link.
Your rights
If you are in the UK, the European Economic Area or another place with similar law, you can ask us to show you what we hold, correct it, delete it, hand it over in a portable form, or stop using it. Email support@nofacepotterysales.com and we will do it. We do not charge for this and we will not make it difficult.
You can also complain to your local data protection authority. In the UK that is the Information Commissioner's Office.
Legal basis
We process your email and purchase record to perform the contract you entered when you bought the product. We keep payment records because the law requires it.
Transfers out of Europe
Some of the companies above are in the United States. Where that involves moving your data out of the UK or the European Economic Area, those transfers rely on the standard contractual clauses or an equivalent approved mechanism in each provider's own terms.
Changes
If we change this, we will change the date at the top. If the change is significant and you have bought from us, we will email you.