Privacy policy

What we collect

• Your email address, to sign you in with a link. SurfMugs has no passwords.
• Your orders: which photos you bought, when, and what you paid.
• Photographers' uploads: the photos and the capture time read from the camera's file data. We don't publish location data from photo files.
• Reports you send us, including any contact email you give.

Card details go straight to Stripe and never touch SurfMugs. Photographers' identity, tax and bank details are collected by Stripe on its own pages; we only see whether payouts are set up.

How we use it

To run your account, deliver the photos you buy, pay photographers, prevent fraud, answer reports, and meet legal and tax obligations. We don't sell your personal information or use it for advertising.

Who we share it with

Only the services that run SurfMugs, each for its own part of the job:

• Stripe: payments, payouts and sales tax
• Supabase: accounts, database and photo storage
• Vercel: website hosting
• Our email provider: sign-in emails

We may also share information when the law requires it.

Cookies and storage

We use a cookie to keep you signed in, and your browser stores your cart. We don't use advertising or tracking cookies.

Photos of you

Surf photographers shoot in public places, so you may appear in photos for sale. If you'd rather a photo of you wasn't sold, ask us to remove it. You can also use the Report link under any photo.

Keeping and deleting data

We keep order records as long as tax and accounting rules require. Photographers' unsold originals may be deleted after a period. To see or delete your account data, contact us.

Children

SurfMugs isn't meant for children under 13, and we don't knowingly collect their information.