Privacy Policy

Who we are (database controller)

This site is operated by the Paper of Love studio, registered Israeli exempt dealer (osek patur) no. 211395629 (the "Studio"). For any privacy matter, contact us using the details at the bottom of this page.

What data we collect

• Email address and interface language — when you voluntarily sign up for a discount code in the welcome popup
• Order details — name, email address, and transaction details received from our payment provider, Lemon Squeezy, after a purchase (your card details never pass through or get stored by us)
• Correspondence — messages you send us on WhatsApp or by email to coordinate your design
• Basic server data — traffic logs generated automatically by our hosting provider, Cloudflare, for security and operations

No legal obligation to provide data

You are under no legal obligation to provide us with any data; doing so depends on your consent. However, without an email address we cannot send your discount code, and without order details we cannot deliver the service.

Purposes of use

• Providing the service — designing your digital invitation and coordinating with you
• Sending the discount code you requested and operational updates about your order
• Marketing emails — only with your explicit prior consent, per Section 30A of the Israeli Communications Law (Amendment 40). Every message includes an unsubscribe option
• Site security and service improvement

Sharing with third parties

We do not sell or rent personal data. Data is shared only with service providers essential to operating the site:

• Lemon Squeezy — payment processing and receipts
• Cloudflare — site hosting and storage of order and lead records
• Our email delivery provider — for sending discount codes and order confirmations
• Google Tag Manager (Google LLC) — tag management for tracking scripts, subject to your consent
• Google Analytics 4 (Google LLC) — statistical site-usage data, subject to your consent
• PostHog — product analytics, session replay, and visitor behavior insights (via a same-domain proxy), subject to your consent

International data transfers

Some of the providers above store data on servers outside Israel (including the US and EU). Transfers are made in accordance with the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001.

Cookies, analytics, and local storage

This site uses analytics tools — Google Tag Manager, Google Analytics 4 (by Google LLC), and PostHog — to understand how the site is used and to improve the service. These tools run only after you actively accept them in the cookie banner shown at the bottom of the screen, and they may store cookies and identifiers in your browser.

If you decline, no tracking runs at all. In that case the browser (localStorage) keeps only a technical record of your choice and a flag noting that the welcome popup was already shown. You can change your choice at any time by clearing this site's data in your browser settings, after which the consent banner will appear again.

Data security and retention

We apply security measures in line with the Israeli Privacy Protection (Data Security) Regulations, 2017, including encrypted traffic (SSL/TLS) and restricted access to data. Data is kept only as long as needed for the purposes it was collected for, or as required by law (for example, keeping transaction records for tax purposes).

Your rights

Under the Protection of Privacy Law you have the right to access the data held about you, to request its correction or deletion, and to withdraw marketing consent at any time. Send requests using the contact details below and we will handle them promptly.

Changes to this policy

This policy may be updated from time to time. The binding version is the one published on this page, with the last-updated date shown at the top.