Your photos stay yours.
Uploads, proofs, designs, carts and orders are stored privately and are scoped to an opaque browser session cookie. They are not published in a public image directory. Public shopping APIs cannot read customer photos or orders.
What the store keeps
The studio stores your original photo, a normalized editing copy, your non-destructive crop instructions, and approved proof. Checkout stores the contact and delivery details needed to process your order. Payment details are entered securely on Stripe, not stored by CanvasRack.
Phone uploads & Google Photos
Phone upload links accept one photo for the editor that created the link and expire after 10 minutes. Anyone with the link can send a photo, but cannot view your other photos, cart or orders. Keep the link private.
When direct Google Photos access is enabled, Google asks you to select the single photo you wish to import. We do not browse your entire library. Temporary access credentials stay in server memory and are discarded after import, cancellation or expiration; no long-term library access is requested. The imported photo follows the same storage and retention rules as other uploads. Google’s authorization and source-preference pages are governed by Google’s own privacy policy.
Retention & cookies
Essential cookies preserve the private session for up to 30 days. Unordered artwork is eligible for deletion after the configured retention period, initially 30 days. Artwork linked to test orders is retained until an administrator removes the test order; production retention policy is a launch requirement.
Support stores the name, email, subject and messages you submit. Staff notes stay private. Order and ticket access links expire after 15 minutes and work once; a redeemed link grants access in that browser for 24 hours. Transactional email previews are retained in a private outbox; delivery is paused. Support records and test order data remain until an operator removes them.
Optional analytics contain event names, size, quantity and order value, never photo content or custom text. Advertising providers are not connected. Operational test-payment events are recorded to verify order processing.