Privacy, in plain English.
Last updated: 13 October 2026.
Your chats and pet photos stay on your device
Your exported chat, selected messages, pet photo, names and dedication are processed in your browser. We do not upload them to our servers or send them to an AI service. Your draft is saved locally using browser storage so it can survive checkout. You can erase it in the studio. Clearing browser data will also remove it.
What we receive
When you purchase a book or pet kit, we record an anonymous draft ID and product type, a browser ownership identifier, the payment reference, amount, currency, order status and acceptance of the digital delivery terms. Stripe processes the payment and the billing information you provide. We do not receive your full card details. Pet photos are resized locally for safe processing and their embedded metadata is discarded; no photo is uploaded.
Service providers and cookies
Vercel hosts this website and may process technical request information such as your IP address for delivery and security. Railway hosts our PostgreSQL database for order records. Stripe processes payments. We use an essential, HTTP-only browser cookie to associate a purchase with this browser. Optional advertising measurement, where available, is explained below. We do not use session replay.
Basic product measurement
We use DataFast in cookieless mode to understand which pages and product steps work: opening the studio, generating a preview, opening checkout and generating a file. We send only the product type and a predefined campaign channel with these events. Chat text, photos, names, draft IDs, raw payment references, visitor advertising click IDs and arbitrary URL parameters are excluded before events are shared with DataFast. Public Meta campaign and ad identifiers may be included to compare advertising sources. We do not use analytics cookies. DataFast processes technical information such as your IP address and browser to derive a pseudonymous identifier that rotates daily. Analytics session information and a campaign label may be held in this tab’s session storage until the tab is closed. This does not create a long-term cross-site profile. DataFast does not receive access to our Stripe account. For purchases with measurement enabled, our server sends the verified HelloFold amount, currency, transaction time, a hashed payment reference and, when available, the pseudonymous visitor ID to DataFast. We send no buyer name, email, address, card details or customer content. Refunds and disputes remove the sale from qualified revenue. Preview and download events are not proof of a purchase. We honour Do Not Track and Global Privacy Control signals for this measurement.
Optional export diagnostics
When purchase measurement is enabled and your current browser preferences allow it, we may record a download attempt linked to your order, the time we checked paid access, the file format and size, and whether the browser reported starting the download or an export error. These records contain no chat text, photo, filename or generated file and stay in our order database. They help diagnose delivery problems; they do not tell us whether you saved or opened the file. Missing reports are treated as unknown. Exporting your purchase does not depend on this reporting succeeding.
Search and AI crawler measurement
We use DataFast to measure known search-engine and AI crawler requests to public pages, robots.txt and our sitemap. We send the public path, crawler user agent and technical IP address for crawler verification. We remove query strings, referrers and cookies, exclude studios, checkout and API routes, and honour Do Not Track and Global Privacy Control. Crawler activity is reported separately from human visits and purchases.
Optional advertising measurement
Where this feature is available, you can choose whether to allow Meta advertising measurement using Privacy choices. Rejecting or withdrawing it does not prevent you from previewing, buying or downloading the product. The choice is separate from immediate digital delivery and basic product analytics.
With permission, advertising measurement may share confirmed purchase amount and currency, advertising identifiers and technical browser information with Meta to measure and improve ads. Your chats, pet photos, private text and generated files are excluded. On public product pages and the checkout handoff, the Meta Pixel shares page visits, product views and checkout starts, including the public page address, advertising cookies, IP address and technical browser information. Automatic event collection and advanced matching are disabled. We do not load the Pixel inside the private editors. Confirmed purchases are sent from our server; the browser does not send another Purchase. Meta may also use its existing cookies according to its own privacy and cookie policies. We do not enable this measurement merely because you purchase.
We keep your preference, its notice version, timestamp and revision in our database, linked to a hash of the first-party browser preference and purchase-recovery cookie. A choice expires after 180 days. Expiry prevents further measurement under that grant; it does not automatically erase its historical record. Contact the operator about access or deletion.
A rejection is also remembered in this browser’s local storage. If the server cannot confirm a withdrawal, measurement stops locally and the interface asks you to retry. Clearing browser data removes that local preference. A request already sent before withdrawal cannot be recalled through this control. We honour Do Not Track and Global Privacy Control for advertising measurement.
After permission, an advertising click from the current page address or an existing Meta identifier may be retained in this tab’s session storage for up to 24 hours of use. The checkout keeps a private server copy for up to 24 hours of use, bound to the exact consent revision and purchase. Withdrawal removes that server copy; expired copies are removed by cleanup processing. Expired tab data is cleared when the site next processes it, or when the tab session ends. The payment provider receives only an opaque reference, not these identifiers.
Meta browser cookies are separate from our 24-hour server context. We remove accessible first-party Meta cookies when you reject or withdraw; cookies set by Meta on its own domains are controlled through your browser and Meta settings. Previously sent events cannot be recalled by this control. See Meta’s cookie policy.
Open Privacy choices at any time to review or change your preference.
Retention and your choices
Your local draft remains until you erase it or clear browser storage. Purchase records are retained for fulfilment, support and applicable accounting obligations. Contact the operator to request access, correction or deletion of personal information; some transaction records may need to be retained by law.
Contact
Luca Iaconelli
Via Quercione, 58, 81100 Caserta (CE)
luca@iaconelli.it
HelloFold is independent from WhatsApp and Meta. Only import conversations you are entitled to use, and consider the other person’s privacy before sharing a book.