Privacy policy
Last updated 29 October 2026.
TODO before launch — this policy is
written to match what this site actually does, but it is not legal
advice. Read it through, fill in your business details in
config/shop.config.ts, and have it checked if you are
unsure.
Who we are
Plane Silly is operated by TODO - your trading name or registered company name. For UK data protection law we are the data controller for the information described here.
Questions about any of this: hello@planesilly.com.
The short version
- We do not use cookies and we do not track you across other sites.
- We never see or store your card details.
- We collect your name and address because something has to be posted to you.
- We do not sell your data to anyone, ever.
What we collect, and why
When you buy something
To fulfil your order we collect your name, delivery address, email address and the contents of your order. We need this to perform the contract between us — without it we cannot post your order.
Your card details are never sent to us. Payment happens on Stripe's own checkout page, and we only receive confirmation that the payment succeeded, plus the billing country and the last four digits.
When you just browse
We count page views and add-to-carts so we can tell which designs people actually like. This is deliberately anonymous:
- No cookies. Nothing is stored that follows you between sites or between visits.
- A random session id is held in your browser's sessionStorage so that a view and an add-to-cart in the same visit can be counted as one visit. It is deleted the moment you close the tab, and it cannot identify you.
- Your cart is stored in your own browser's localStorage. It never reaches our servers until you click checkout, and it contains only product codes and quantities.
- Cloudflare Web Analytics gives us aggregate page view counts. It is cookieless and does not fingerprint visitors.
Because none of this identifies you or follows you around, the site does not need a cookie consent banner — which is rather the point.
Who else sees your data
We use three processors, and only these three. Each one sees the minimum it needs:
| Who | What they get | Why |
|---|---|---|
| Stripe | Your card details, email, billing and delivery address | To take the payment. They are the payment controller for this. |
| Printful | Your name, delivery address, email and what you ordered | To make your order, post it to you, and email you tracking. |
| Cloudflare | Standard web request data, and our anonymous event counts | To host the site and run the checkout service. |
Printful and Stripe may process your data outside the UK. Both operate under standard contractual clauses and equivalent safeguards for international transfers.
We will also disclose information if we are legally required to. We do not sell personal data, and we do not share it for advertising.
How long we keep it
- Order records: six years, because UK tax law requires us to keep records of sales.
- Emails you send us: up to two years after the matter is resolved.
- Anonymous analytics: indefinitely, but it is not linked to you and cannot be traced back to you.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong;
- delete it, where we are not legally required to keep it;
- restrict or object to how we use it;
- send it to you or another provider in a portable format.
Email hello@planesilly.com and we will respond within one month. If you are unhappy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If we change this policy we will update the date at the top. Material changes affecting existing customers will be emailed.