Privacy

Hangarang sells photographs. We collect what it takes to make one and post it to you, and we would rather explain that plainly than at length.

What we collect

When you buy something. Your name, email address, delivery address, and a telephone number if you give one. What you ordered, what it cost, and where it is. We keep this: an order is a financial record and we are required to be able to account for it.

Your card details never reach us. Payment happens on Stripe's own pages. We are told that a payment succeeded and for how much; we are never sent the card number and could not store it if we wanted to.

If you make an account. Your name, email address and a password, which is stored scrambled in a way that cannot be reversed — nobody here can read it. An account is optional and buying never requires one.

If you buy without making one. We keep an account record against the email address you gave, holding that address and the name from your delivery details — and no password. It exists so you can ask for a sign-in link later and find the thing you bought, rather than having to write to us for an order number. Nothing about it signs you in, and it cannot be opened with a password because there is none to guess; the only way in is a link sent to that address. If you would rather it did not exist, ask us and we will remove it.

If you write to us. Your name, email address, your message, and the order number if you mention one.

While you use the site. A random identifier in your browser so we can remember your basket and show you your own order after you pay. It contains nothing about you, it is not shared, and it is discarded when you close your browser.

Which photographs you choose. When you swap one photograph for another, we record that the swap happened and which photographs were involved. It is how we learn which pictures people like. It is not connected to you, your account, or your order.

Who else is involved

We use a small number of outside services. Each receives only what its job requires.

• Stripe takes the payment and calculates sales tax. It receives your name, address and email in order to do so, and it holds the card details we never see.
• Contentsquare records how pages are used — what was clicked, what was scrolled past — so we can find the parts that do not work. What you type into forms is masked and is not recorded.
• Albacross looks up the internet address a visit comes from to tell us which companies visit the site. It is aimed at businesses buying wholesale, not at individuals.
• Google Analytics records visits and what pages they include, aggregated across everyone, to show us which parts of the site are actually being used.
• Userback powers the feedback button, and receives whatever you choose to send through it along with the page you were on.
• Mailchimp holds the email addresses given to the mailing list, and nothing else.
• Cloudflare and A2 Hosting carry and store the site itself, and so handle traffic in the ordinary course of serving it.

We do not sell your information, and we do not share it for advertising.

How long we keep it

Orders and the records that explain them are kept, because we have to be able to account for a sale. Words you composed but never bought are deleted once enough of them accumulate. Sign-in links expire and are cleared a week later. The browser identifier goes when you close your browser.

What you can ask for

You can ask what we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected] and we will answer within the time the law allows — 30 days under the GDPR, 45 under California law.

One limit worth stating rather than burying: if you have bought something, we cannot delete the order itself, because it is a financial record with tax consequences. We can remove your account and your saved details and leave the order unattributed.

California residents have the right not to be treated differently for exercising any of this. You will not be.

Children

This is not a site for children and we do not knowingly collect anything from anyone under 13.

Changes

If this changes we will change the date at the top. If it changes in a way that matters, we will say so rather than rely on you noticing.

Reaching us

Hangarang, California, United States.
[email protected]