Privacy Policy

This Privacy Policy explains how Squarepaste (“Squarepaste,” “we,” “us,” or “our”) collects, uses, and shares information when you visit squarepaste.com (the “Site”), purchase a plugin or template, or engage us for custom design work. By using the Site you consent to the practices described here.

We collect the following categories of information:

• Provided directly: Your email address (entered at checkout or in correspondence), your name (if provided), the Squarespace site URL you intend to license a plugin onto, and any project details you share with us through the intake form at /begin or by email.
• Payment information: Card and billing details are collected and processed by Stripe, Inc. We do not see or store your full card number. We receive a confirmation that payment succeeded along with the customer email and the last four digits of the card.
• Automatically collected: Server logs containing your IP address, browser type, referring page, and timestamps when you visit the Site. We use these for operational and security purposes only.
• Browser storage: We use browser sessionStorage to remember your in-progress plugin build while you move through the configure → checkout flow. This data lives only on your device and is cleared when you close the tab.

We use the information we collect to:

• Process and fulfill plugin and template orders, including delivering Squarespace invitations and transferring template ownership.
• Send order receipts, delivery notifications, and support replies.
• Operate the order-recovery flow at /recover so you can recover your files using your order ID and email.
• Respond to support inquiries and custom-project requests.
• Improve the Site, our products, and our customer experience.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell or rent your personal information to third parties. We do not send unsolicited marketing email. You will receive order-related correspondence only, unless you have explicitly opted in.

We share limited information with the following service providers, each of which operates under its own privacy policy:

• Stripe, Inc. processes payments. See Stripe’s privacy policy.
• Squarespace, Inc. hosts the templates we transfer to you and receives the email address you used at checkout so we can issue an Administrator invitation. See Squarespace’s privacy policy.
• Vercel Inc. hosts squarepaste.com and processes standard request logs. See Vercel’s privacy policy.

Squarepaste does not set first-party tracking or advertising cookies. The only browser storage we use is the sessionStorage entry described above, which holds your in-progress build and is cleared when you close the tab. Stripe’s checkout components may set their own cookies for fraud prevention; these are governed by Stripe’s privacy policy.

We use industry-standard measures to protect your information, including HTTPS across the Site, server-side request validation, and least-privilege access controls for our internal tools. Payment card data never touches our servers; it goes directly from your browser to Stripe. No system, however, is 100% secure, and we cannot guarantee absolute security.

Order records (your email, the product purchased, the amount, and the Squarespace site URL where applicable) are retained for at least seven (7) years to comply with U.S. tax and accounting requirements. Server logs are retained for up to 90 days. Project files and correspondence for custom engagements are retained for the duration of the engagement plus a reasonable archival period for follow-up support, generally not longer than two (2) years.

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal information; to obtain a copy of your data in a portable format; and to object to certain processing. To exercise any of these rights, email us at info@squarepaste.com. We will respond within 30 days. We do not discriminate against users who exercise these rights.

California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of information we collect, the right to deletion, and the right to opt out of the “sale” of personal information. We do not sell personal information as defined by the CCPA.

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Squarepaste is based in the United States and processes data on servers located in the U.S. If you access the Site from outside the U.S., your information will be transferred to, stored in, and processed in the U.S., which may have data-protection laws that differ from those of your country. By using the Site you consent to this transfer.

We may update this Privacy Policy from time to time. The “Effective” date at the top of this page indicates the most recent revision. Material changes will be communicated by posting the updated policy here and, where appropriate, by direct email to active customers.

Questions about this Privacy Policy or about your data? Email us at info@squarepaste.com or write to Squarepaste, 4015 Travis Dr., Ste 211, Nashville, TN 37211.