dust and starlightDust & Starlight LLC is two people in Salt Lake City, Utah. This page says what we collect when you use this site, why, and who else handles it. We don't sell or rent anyone's personal information.
When you buy a print
Checkout runs on Stripe. You enter your card or other payment details with Stripe, not with us, and we never see or store your card number. From Stripe we receive your name, email address, phone number, shipping address, what you bought, and whether you'd like it signed.
We use that to make and ship your print. Prints are made by our lab, NMFA, which receives your name, shipping address, and phone number so it can deliver the order. We email you about your order, and we keep order records for as long as tax and accounting rules require.
When you write to us
The contact form sends us your name, email address, and message. It stays in our inbox so we can answer, and we use your email only to reply.
Order confirmations and contact-form messages are delivered through Resend, an email service, which handles the addresses and message contents needed to send them.
The newsletter
If you sign up for our newsletter, we keep your email address and the date you signed up, in Resend, our email service, and nothing else about you: no name, no IP address, no device details. We use the address only to send the newsletter. We email you once to ask you to confirm, and until you do we send you nothing else; an address that is never confirmed stays in Resend, marked as not subscribed, until we delete it. Resend tells us when an issue was delivered. We have turned off open and click tracking, so we do not know whether you opened an issue or which links you pressed.
Every issue has an unsubscribe link at the bottom, and using it stops the newsletter at once. To have your address removed from Resend altogether, write to us.
Analytics
We also measure print views, saved print choices, sizes selected from room previews, cart additions, checkout starts, and confirmed purchases. Purchase measurements include the print choices, quantities and amounts, plus an opaque order reference used to prevent duplicate reporting. These events contain no buyer name, email, address, payment details, private wall photo, or checkout-session link.
We use Google Analytics to see which pages and photographs people look at, and to measure loading speed, layout stability, and how quickly the site responds to interactions. It sets cookies and records things like the pages you visit, roughly where you are (city or region, not your address), and the kind of device and browser you use. You can block it with your browser's cookie settings or Google's opt-out add-on, and the site works the same without it.
We also use Microsoft Clarity, together with Microsoft Advertising, to see how people use the site: where they click and scroll, heatmaps, and session replays. Clarity collects this usage data with first- and third-party cookies and similar technologies, and Microsoft uses it to show how the site is used, for site improvement, for fraud and security purposes, and for advertising. We tell Clarity that advertising storage is denied for every visitor, so it doesn't share this site's data with Microsoft Advertising or set Microsoft's advertising cookie. Our Clarity project is linked to our Google Analytics account. Clarity masks what you type into a form, and our contact and newsletter forms are masked entirely; it doesn't run on the order confirmation page, and checkout happens on Stripe, where Clarity can't see it. For how Microsoft collects and uses this data, see the Microsoft Privacy Statement.
If you're in the European Economic Area, the UK or Switzerland, we ask before either of them sets a cookie: until you say yes, Google Analytics and Clarity set none, and each page you open counts as a separate visit. Wherever you are, you can change your choice for this browser here:
Cloudflare Web Analytics counts page views and page loading speed. It sets no cookies and doesn't follow you between visits.
Do Not Track and Global Privacy Control
If your browser sends a Global Privacy Control or Do Not Track signal, we don't load Google Analytics or Microsoft Clarity for you. Cloudflare Web Analytics still counts the page view, without cookies, and the site works the same either way.
Videos
Some pages have a YouTube video. Nothing loads from YouTube until you press play; then the player comes from YouTube's privacy-enhanced domain (youtube-nocookie.com), and Google's privacy policy applies to what it collects.
Search services
We use Bing Webmaster Tools to monitor how the site appears in Bing search. The site includes a verification token so Microsoft can confirm we control this domain. We also use IndexNow to notify participating search engines when site URLs change.
Hosting
The site is served by Cloudflare, which processes your IP address and request details to deliver pages and protect the site from abuse.
Your information, your call
To see what we have about you, correct it, or have us delete it, write to us. We'll answer within a few days. Order records we're required to keep for tax purposes stay until that requirement ends.
This site isn't aimed at children under 13, and we don't knowingly collect their information.
Changes
If this changes, we'll update this page and the date at the top.