Privacy Policy

Effective October 25, 2026 · Last updated October 25, 2026

This explains what Standwell Web keeps about you, why, who helps us run it, and how to get a copy or have it deleted. Short version: we keep what we need to run your shop, we do not sell your data, and we do not use advertising trackers.

1. Who we are

Standwell Web is run by Standwell Web, LLC, a Colorado limited liability company. Privacy questions go through the contact form or to [email protected].

Your shop’s visitors are your customers. Standwell Web does not ask your visitors for personal details, and public shops do not set cookies.

2. What we keep

Your account: your email address and a scrambled (hashed) version of your password. We never store your password in a form anyone can read, not even us. When you ask for a password reset link, we keep only a scrambled copy of that link’s code, which works once and for 60 minutes; the record is deleted about a day after it expires.
Your shops: the business name, words, listings, prices, layout choices and photos you put in, plus the shop’s web address and any domain of your own you connect.
Photos: when you upload a photo we remove its camera details and location (EXIF and similar data), turn it the right way up, and make it smaller (at most 1600 pixels on the long side) before saving it, plus a small copy for your photo list. We keep only those cleaned pictures. Every photo you add stays in your shop’s My photos until you delete it there, or delete the shop or your account.
Videos: a short video you put on a photo card is made smaller on our server (up to 8 seconds, phone quality), and its camera details and location are removed. We keep the smaller video and one still picture from it, not your original file.
Billing: what you bought, for which shop, the amount, the dates, and our payment processor’s reference numbers for the payment and plan. We never see or store your card number. You pay by card, or a card wallet like Apple Pay or Google Pay, on Stripe’s own secure page, and Stripe processes and stores card data under its own privacy policy. We do not keep your card’s brand or last 4 digits either; Stripe shows those on its own “Manage card” page.
Messages you send us: if you use the contact or custom-work form, the name, email, phone, business details and message you type.
Technical records: like nearly every website, our server writes a short log line for each request: the time, the page asked for, the result, and your IP address. We use these to keep the service working and to stop abuse, such as too many sign-in attempts. Those counts are kept in memory only and forgotten within a day.
Your own domain: to check a domain you connect, we look up its public DNS records.

We do not use analytics services or advertising trackers, and we do not buy data about you.

Visit counts: we count how many times our own pages (such as the home page and Packages) are opened each day, and how many different visitors that was, without cookies and without tracking you. To count a visitor only once a day, the server mixes your IP address and browser name with a random code that changes every day and is kept only in memory, then forgets it at midnight. We store only the day’s totals, nothing about you. The total number of visits is shown on our home page. We also keep one daily total of shop page visits for all shops together, not per visitor.

Find a shop near you: our shop directory is opt-in. A shop is listed only if its owner ticks the box in Your shops, and the listing shows only the shop name, town, state, category and link. Owners can opt out any time by unticking it; the listing comes off right away.

3. Cookies

We use only cookies that make the app work. None are used for advertising or tracking across sites.

Cookie	What it does	How long
wb_account	Keeps you logged in	30 days, or until you log out
wb_shop	Remembers which of your shops is open in the editor	30 days
wb_demo, wb_try	Keeps a guest try going before you have an account	30 days
wb_admin	Staff login only	7 days

Our sales pages (like this one) load typefaces from Google Fonts, which means your browser asks Google’s servers for them and Google receives your IP address. See Google’s privacy policy. The editor and public shops use typefaces we host ourselves.

4. How we use it

To run your account and shops, take payments, answer you, keep the service secure, meet our legal and tax duties, and fix problems. We, or Stripe for us, may email you about your account and billing, such as password reset links you ask for, a notice when your password is changed, a notice when a card payment fails or your shop goes offline because a renewal was not paid, receipts and renewal reminders. We do not send marketing email.

We do not sell your personal data, and we do not share it for targeted advertising.

We share data only with companies that help us run Standwell Web, only as much as they need, and under their own privacy terms:

Render (hosting; our server, database, photos and backups live there, in the United States)
Cloudflare (web address routing, security and delivery; it sees requests to our site. When switched on, Cloudflare R2 also stores an encrypted copy of our nightly backups, locked with a key only we hold, so Cloudflare can’t read it. Those copies roll off like the others, below.)
Stripe (payments by card, or a card wallet like Apple Pay or Google Pay, and card plans; it holds your card details, not us)
Resend (sending account emails, such as password reset links, the notice that your password was changed, and notices about a failed card payment; it receives your email address and the message we send you, under its own privacy policy)
Your registrar: if you connect your own domain, the registrar you chose holds that domain under its own terms. We do not send it your data.

We may also share information if the law requires it, to protect people or the service, or as part of selling or transferring the business (in which case this policy keeps applying to your data).

6. How long we keep it

Your account and shops: until you delete them.
Guest tries that are never saved to an account: removed after about a week of no use.
Backups: we take a backup every night and keep 7 daily and 4 weekly copies (and, when switched on, an encrypted copy off our main server for the same time). Anything you delete stays in those copies until they roll off, about 4 to 5 weeks later. We use backups only to restore the service.
Payment records: when you delete your account we keep a record of each payment with only the amount, dates, what kind of plan it was, and the payment processor’s reference, with no email, name, or shop attached. We keep these for tax and accounting for 7 years, as tax law requires. Our payment processor also keeps its own records under its own terms.
Messages you send us through the contact form are kept for up to 3 years as a record of what was said, so it’s there if it’s needed for a dispute or legal matter. We may keep a message longer if it’s part of a dispute or legal matter. After that a message is deleted, but copies can stay in our backups until they roll off, about 4 to 5 weeks later, like everything else in backups.
Server logs: kept by our hosting provider (Render) for 7 days, then deleted.

7. Your choices

You control most of your data directly from your account, without having to ask us: you can edit it, download your photos and words as a .zip, and delete your account yourself. The exceptions are billing records, which we keep for 7 years because tax law requires it; backups, which roll off on their own about 4 to 5 weeks later; and Stripe’s own records of your payments, which Stripe keeps under its own policy.

See and download your photos and words. On Your shops, choose “Download your photos and words”. The .zip holds the photos you uploaded and a plain, readable copy of your text: account email, business names, descriptions, listings, prices, hours, contact details, your own domains and payments, plus the licenses of the fonts our editor offers. The .json button gives the same text as one file. Templates, layouts, styles and page code are Standwell Web’s and are not included; stock photos are listed with their source links.
Correct it. Fix your shop’s words and photos any time in the editor. To correct your account details, like your email address, contact us.
Delete it. On Your shops, choose “Delete this account”. This stops any card plans with Stripe, then removes your account, sign-ins, shops, listings, connected domains and photos right away, with the payment records and backups exceptions above.
Ask us. For a privacy request you can’t do yourself in your account, email [email protected]. We will answer within 30 days and may need to confirm it is really you.

8. Security

We use encrypted connections (HTTPS), hash passwords, limit sign-in attempts, and keep backups. No service is perfectly secure; if something goes wrong that affects your data, we will tell you as the law requires.

9. Children and teens

Standwell Web is for businesses and personal projects, like a student’s side hustle, a club, or a hobby. You must be 18 to open an account and pay. Teens 13 to 17 can build and run a site with a parent or guardian who opens the account, agrees to these terms, and is responsible for it. We don’t knowingly collect personal data from children under 13. If you think a child under 13 has given us their details, contact us. We’ll look into it promptly, and if it’s true, we’ll delete them.

10. Colorado and other US state rights

Depending on where you live, you may have rights to access, correct, delete or get a copy of your personal data, and to opt out of its sale or use for targeted advertising (we do neither). You can use these rights as described above, and you can appeal a decision by replying to our answer. Contact-form messages are kept as described in section 6; if you ask us to delete one, we will, unless the law lets or requires us to keep it (for example, because it is part of a dispute), and we will tell you which.

Our service is run from the United States, and your data is stored there.

11. Changes

If we change this policy in a way that matters, we will tell you by email or in the app before it takes effect.

12. Contact

Standwell Web, LLC
Platteville, CO 80651
Phone: 720-939-5013
Email: [email protected]