Privacy Policy

Effective September 14, 2026

This Privacy Policy explains what information custompumpkin.com (the “Service”) collects, how it is used and shared, and the choices you have. The Service is operated by Custom Pumpkin, a sole proprietorship based in Los Altos, California (“we,” “us”). Using the Service is also subject to our Terms of Service.

Information we collect

• Email address. Used to create your account and sign you in.
• Sign-in codes. A one-time code we email you, kept only until it is used or expires (10 minutes).
• Images you upload. The full-size image is kept only while your stencil is being made and is then deleted. If you have an account, we keep a smaller thumbnail of it so you can see it next to your stencil; if you do not, nothing is kept.
• Stencils. The stencils generated from your images, their printable PDFs, and the pictures of each step shown while a stencil is made.
• Technical information. Like most websites, our servers receive and may log your IP address, browser type, pages requested and the time of each request.
• Cookies. We use a session cookie to keep you signed in and to keep track of stencils you make without an account, and Google Analytics sets cookies to measure how the Service is used. We do not use advertising cookies.
• Usage information. Google Analytics collects information about your visits, such as the pages you view, how you arrived at the site, your device and browser type, and your approximate location.

How we use information

We use this information to:

• provide the Service, including making and showing your stencils;
• send you sign-in codes;
• keep the Service secure and prevent abuse;
• understand how the Service is used, so we can improve it; and
• diagnose and fix problems.

Your images are processed on our own servers; they are not sent to third-party artificial intelligence services. We do not sell your personal information, share it for advertising, or send you marketing email.

How information is shared

• Service providers. Amazon Web Services hosts the Service and stores its data, and delivers our sign-in emails. Google Fonts supplies the fonts used on our pages, so your browser requests them from Google, which receives your IP address and browser information (see Google’s Privacy Policy).
• Google Analytics. We use Google Analytics to understand how the Service is used. Google receives information about your visits as described above and processes it under its own policies; see how Google uses information from sites that use its services. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies in your browser. We do not use Google Analytics advertising features.
• Legal reasons. We may disclose information if we believe it is required by law or legal process, or needed to protect the rights, property or safety of us, our users or others.
• Transfer. If the Service is sold or transferred, information may be transferred as part of that transaction.

Retention and deletion

Without an account, we store nothing for you long term. Your uploaded image and the stencil made from it are kept only while your visit lasts, so you can download it, and are deleted when your visit ends (after about 30 minutes of inactivity) and in any case within a few hours.

With an account, we keep your email address, your stencils and a thumbnail of each uploaded image until you delete them or we do. Deleting a stencil also deletes its thumbnail and step pictures. Copies may remain in backups for a limited time. We may delete any account or information at any time, for any reason; the Service is not a storage or backup service, so keep your own copies of anything you want to keep.

Your choices

You can delete any of your stencils, or your whole account and everything in it, at any time from your account on the site.

Do Not Track

Our Service does not currently respond to Do Not Track signals. We do not use information about your visits for advertising or to track you across other websites.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it. Photos of a minor should be uploaded only by, or with the permission of, a parent or guardian.

Security

We use reasonable measures to protect information, but no method of transmission or storage is completely secure, and we cannot guarantee its security.

Where information is stored

Information is stored and processed in the United States. If you use the Service from outside the United States, your information will be transferred to and processed there.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date.

Contact

Questions about this policy: contact@custompumpkin.com.