Last updated: September 24, 2026
Who we are
Brushtalking (https://brushtalking.com) is a one-person studio run, making printables and stationery for people learning non-Latin scripts. For privacy questions, email hello@brushtalking.com. For order questions, email orders@brushtalking.com.
What we collect and why
When you place an order: your name, email address, billing address, and order details. If you buy a physical product, we also collect your shipping address and, if you give it, your phone number. We use this to process payment, calculate sales tax, deliver your downloads or ship your order, send order emails, handle refunds, and meet tax and accounting obligations.
Payments: payments are processed by WooPayments, which is provided by Automattic and powered by Stripe. Your card details go directly to them; we never see or store your full card number. To prevent fraud, they may also collect information about your device and browser at checkout. Their privacy policies: https://automattic.com/privacy/ and https://stripe.com/privacy.
When you create an account: your name, email, username, password (stored encrypted), addresses, and order history, so you can re-download purchases and check out faster.
When you download a product: we log each download, including the date and your IP address, to manage download limits and prevent abuse.
When you leave a product review: the review text, name, and email you enter, plus your IP address and browser user agent string. An anonymized string created from your email address (a hash) may be sent to the Gravatar service to check whether you have a profile picture there. Gravatar’s privacy policy: https://automattic.com/privacy/. Once your review is published, your name, profile picture, and review are visible to the public. Reviews may be marked as coming from a verified buyer.
When you browse the site: we use Jetpack Stats, provided by Automattic, to understand which pages are visited and how people find the site. It collects information such as your IP address, browser type, the pages you view, and the site that referred you, and we see only aggregate statistics.
Cookies
- Cart and session cookies remember what’s in your cart while you shop. They expire at the end of your session or within 48 hours.
- Payment cookies are set by Stripe on behalf of WooPayments to detect and prevent fraud during checkout.
- Order attribution cookies record how you arrived at the site (for example, from a search engine or a link), so we can see which channels lead to orders.
- Login cookies, if you have an account, keep you signed in. They last two days, or two weeks if you choose “Remember Me.”
- Advertising cookies are set by Google to measure whether our ads lead to purchases.
Embedded content from other websites
Pages on this site may include embedded content such as videos or images. Embedded content from other websites behaves exactly as if you had visited that website. Those sites may collect data about you, use cookies, and track your interaction with the embedded content, especially if you have an account there and are logged in.
Who we share your data with
We share only what each service needs to do its job:
- WooPayments (Automattic and Stripe), to take payment and prevent fraud.
- WooCommerce Tax (Automattic), which receives your address and order details to calculate sales tax.
- Jetpack (Automattic), which provides site statistics, security, and performance features.
- Nixihost, which hosts the site.
- Print and shipping partners once physical products launch. They receive your name, shipping address, and order contents so they can print and deliver your order.
- Google, which receives information about site visits and purchases to measure ad performance. Google’s privacy policy: https://policies.google.com/privacy.
- Authorities, where the law requires it.
We don’t sell your personal data. If you request a password reset, your IP address is included in the reset email.
How long we keep your data
- Completed and refunded orders are kept for 7 years for tax and accounting purposes. After that, the personal details on them are anonymized.
- Cancelled orders are deleted after 4 months.
- Failed orders are deleted after 3 months.
- Pending (unpaid) orders are deleted after 1 month.
- Customer accounts that are inactive for 3 years (no logins or orders) are deleted. This also removes access to past downloads through My Account.
- Reviews and their metadata are kept until you ask us to remove them.
WooPayments keeps its own records of transactions under its own retention policy.
Your rights
You can ask us to:
- send you an export of the personal data we hold about you
- correct it
- erase it
Email hello@brushtalking.com to make any of these requests. When we erase your data, we delete your account and reviews and revoke access to your downloads. We keep the order records we’re required to hold for tax and accounting purposes, and anonymize them when that period ends. If you have an account, you can also view and edit your details at any time under My Account. Depending on where you live (for example, the EU, UK, or certain US states), you may have additional rights. We’ll honor them.
Where your data is sent
Our service providers, including Automattic, Stripe, and Nixihost, may process data outside your country, including in the United States.
Changes
If we update this policy, we’ll change the date at the top.