// FAB.04 · Privacy notice
Hussar tee privacy
Plain version: your face photo is used once to draw your design and then deleted. Order details go to the print shop that makes and delivers your shirt.
Last updated 21 October 2026
Who runs this
The T-shirt maker on tomazz.dev is run by Tomasz Sadowski, Dubai, UAE. For any question, or to have your data deleted, write to shop@tomazz.dev.
What we collect
- Your face photo, only to draw your hussar design.
- The designs made from it (the drawn candidates and their tee previews).
- If you order: name, email, UAE mobile number, delivery address, tee colour, size and quantity, and the payment details of your crypto transfer (coin, network, amount, payment address and transaction).
- Technical data: a session cookie that links your designs and order to your browser, and basic abuse-prevention data (rate limits, a salted hash of your IP address, the result of the automatic photo check). No ads, no tracking pixels.
Who processes it
- OpenRouter → Google AI Studio (Gemini). Your photo is sent through OpenRouter to Google’s Gemini image model to check it and to draw the design. Google may keep request data for up to 55 days for abuse monitoring, under its own terms. We don’t control that copy.
- A print shop in Dubai. For paid orders it receives the print file of your design, your name, phone number and delivery address, so it can print and deliver the shirt. We ask it to delete the files after printing.
- Email delivery. Order emails are sent from shop@tomazz.dev through a transactional email provider, which sees your email address and the message.
- Blockchains. Crypto payments are public by nature. The transfer you make is visible on the network you pay on, and that can’t be deleted by anyone.
How long we keep it
| Data | Deleted |
|---|---|
| Face photo | Right after your design is made (held in memory only; an hourly sweep removes anything older than 30 minutes) |
| Unpaid designs and previews | 24 hours after creation (or 24 hours after an unpaid invoice expires) |
| Automatic photo-check results | 30 days (no images, IP stored only as a salted hash) |
| Design and print file of a paid order | 30 days after delivery (45 days after it goes to the printer if delivery isn’t confirmed) |
| Name, phone, email, address | Cleared 90 days after delivery. We keep only the order number, date, amount, colour and size for our records |
| Data held by Google (via OpenRouter) | Up to 55 days, by Google |
Your choices
- Only upload a photo of yourself, or of an adult who has said yes. No photos of children.
- Want your design or order data deleted sooner? Email shop@tomazz.dev (with your order number if you have one) and we’ll delete what we hold, except what we must keep to deliver a paid order or for our accounts.
- You can ask what we hold about you at the same address.