Privacy Policy

Collage Soup ("we," "us," or "our") respects your privacy. This Privacy Policy describes what personal information we collect when you visit buy.collagesoup.com, make a purchase, or interact with our services, how we use it, who we share it with, and what choices you have. By using our site or purchasing from us, you agree to this policy.

1. Information We Collect

Information you give us when you place an order or contact us: name, email address, billing address, phone number, and payment information (handled directly by Shopify — we never see or store your full payment card details).

Information we receive from Shopify when an order is completed: order number, items purchased, purchase amount, and your name and email, which we store in our database to deliver your digital downloads and send your download confirmation email.

Information we collect automatically when you browse our site: IP address, browser type, referring page, pages visited, and actions taken (such as products viewed, items added to cart, and searches). This is collected through cookies and tracking technologies described in Section 5.

2. How We Use Your Information

We use the information we collect to:

  • Fulfill your order and deliver your digital downloads
  • Send you a purchase confirmation and download link email via Resend (our email delivery provider)
  • Send cart recovery emails if you leave the site with items in your cart and you are a marketing subscriber — you can opt out at any time
  • Provide customer support
  • Measure site performance and understand how customers find us, using Google Analytics 4 and Google Ads conversion tracking
  • Measure advertising effectiveness on Meta (Facebook/Instagram), TikTok, and Pinterest platforms through advertising pixels and server-side event reporting
  • Improve the site and our product selection

3. Third-Party Services We Use

Shopify — powers our online store. Your order data, name, email, and address are collected and processed by Shopify. See Shopify's Privacy Policy.

Supabase — our database provider. When you purchase a digital product, we store your email address, Shopify customer ID, order number, and the products you purchased in a Supabase database in order to generate and track your download links. This data is retained for as long as your purchase access is active.

Resend — our transactional email provider. We share your email address, first name, and order details with Resend solely to deliver your purchase confirmation and download link email.

Google Analytics 4 and Google Ads — we use Google Analytics 4 (GA4) to understand how visitors use our site. GA4 receives browser-generated events (page views, searches, product views, add-to-cart actions) via cookies in your browser. When you complete a purchase, we also send a server-side purchase event to GA4 via the Measurement Protocol — this event contains a transaction ID, order value, and items purchased; no name or email is included. We also use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on. For more information see Google's Privacy Policy.

Meta (Facebook/Instagram) — we use the Meta Pixel on our site, which places a cookie in your browser and sends events (page views, product views, add-to-cart actions) to Meta for advertising measurement and optimization. When you complete a purchase, we also send a server-side event to Meta's Conversions API. This server-side event includes hashed versions of your email address, phone number, name, and address, along with your order value and items purchased, so that Meta can attribute the purchase to an ad you may have seen and improve ad delivery. The information is transmitted in hashed form but is still considered personal data. You can control Meta's use of your data for advertising through your Meta Ad Preferences.

TikTok — we use the TikTok Pixel to measure the performance of TikTok advertising campaigns. The pixel collects page view, product view, search, and add-to-cart events via your browser. See TikTok's Privacy Policy.

Pinterest — we use the Pinterest Tag to measure the performance of Pinterest advertising campaigns. The tag collects page view, product view, and related events via your browser. See Pinterest's Privacy Policy.

4. Email Communications

Purchase confirmation and download emails: After every purchase, we send an automated email to the address you provided at checkout. This email contains your download links, which expire 14 days after purchase. If you need your links re-sent, contact us at orders@collagesoup.com.

Cart recovery emails: If you add items to your cart but do not complete checkout, and you are a marketing email subscriber, we may send you a reminder email with a link to return to your cart. You can opt out of marketing emails at any time by clicking "unsubscribe" in any email we send you.

We do not sell your email address or use it for any purpose not described in this policy.

5. Cookies and Tracking Technologies

Our site uses cookies and similar tracking technologies. These include:

  • Functional cookies — used by Shopify to manage your cart and session
  • Analytics cookies — Google Analytics 4 sets cookies (such as _ga) to count visits and measure site usage
  • Advertising cookies — Meta sets _fbp and _fbc cookies for ad attribution; TikTok and Pinterest set their own advertising cookies
  • Browser storage — we may use localStorage on certain landing pages to remember an A/B test assignment during your visit; this data is not shared with third parties

You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking cookies may affect site functionality. You can also opt out of targeted advertising in the United States on our Your Privacy Choices page.

6. Your Rights

California residents (CCPA): You have the right to know what personal information we collect, to request deletion of your personal information, to opt out of the "sale" or "sharing" of personal information for targeted advertising, and to not be discriminated against for exercising these rights. To opt out of targeted advertising data sharing, visit our Your Privacy Choices page.

EU/EEA residents (GDPR): You have the right to access, correct, or request deletion of your personal data. We rely on Standard Contractual Clauses for transfers of personal data from the EU/EEA to the United States.

All customers — data access and deletion: You can request a copy of the purchase and download data we hold about you, or ask us to delete it. To submit a request, email orders@collagesoup.com with the subject "Privacy Request" and include the email address associated with your purchases. We will provide access or confirm deletion within 30 days. Deletion requests will anonymize your download records; this does not affect Shopify's records of your transactions.

7. Data Retention

We retain your purchase and download records in our database for as long as your account is active or as needed to support your access to purchased products. Download link tokens expire 14 days after purchase. Library access tokens expire 1 hour after issuance. If you request deletion, your download records are anonymized in our database within 30 days.

Shopify retains order records in accordance with Shopify's data retention policies. Analytics data retained by Google, Meta, TikTok, and Pinterest is subject to those platforms' own retention policies.

8. Children's Privacy

Our site is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly.

9. Security

We use industry-standard measures to protect your personal information, including HTTPS encryption for data in transit and secure, access-controlled storage. Download tokens are cryptographically signed and expire automatically. No system is perfectly secure, and we cannot guarantee absolute security.

10. Links to Other Sites

Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects when the current version took effect. Continued use of our site after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Collage Soup
Email: orders@collagesoup.com

Effective Date: June 26, 2026