Privacy
Last updated: 1 October 2026
Short version: we collect the minimum we need to print and ship your poster, we don't sell your data to anyone, and we don't track you across the internet.
What we collect
When you place an order: your email, name, and shipping address. When you upload photos: the photo files themselves, plus the crop and zoom you choose. If you use the chat or the feedback board: what you write there, and your email if you leave it. That's it.
Where it lives
- Order details — on a server in Germany (Hetzner), encrypted at rest.
- Photos — Cloudflare R2 in the EU. The full-size originals are deleted automatically 30 days after delivery. Smaller display copies are retained for your order tracker and re-orders, and are deleted on request — email us.
- Payment data — Mollie handles it. We never see or store your card.
- Print files — sent to our print partner once you've paid, so they can print and ship your poster. Deleted from their systems within 30 days of delivery.
- Chat and feedback — UserJot, the service behind the chat and the feedback board. It's run by LogSnag LLC and stores data in the United States, under the EU's Standard Contractual Clauses. Nothing loads from UserJot until you open the chat or the board, so if you never do, nothing goes there. Once you have, it loads on later visits too, so a reply can find you. When it loads, it fetches its typeface from Google Fonts.
Analytics
We use Plausible Analytics — a privacy-friendly, cookieless service. It tells us how many people visit Wando and where they came from, never who they are.
Cookies
One cookie: a session ID so your draft poster survives page refreshes. It expires 30 days after your last visit. No tracking cookies, no ad pixels.
Open the chat and your browser also keeps a few things in local storage, so the conversation is still there next time: UserJot's, plus one note of ours that you've used it.
Your rights (GDPR)
You can ask us at any time to:
- Show you what we have on file about you
- Correct it
- Delete it (this applies to closed orders — open orders we need to keep to finish them)
- Export it in a portable format
Email [email protected] with "Privacy request" in the subject. We respond within 14 days.
Contact
Privacy questions: [email protected]. EU Data Protection authority for the Netherlands: Autoriteit Persoonsgegevens.