Privacy notice

This notice explains how Tre Kronor Design LLC (“we”, “us”) collects, uses and shares personal information when you visit tonera.cc or use Tonera.

In short: your artwork never leaves your computer. If you create an account we keep your email address, and if you buy Pro, Stripe handles the payment. We don’t sell your information, and you can delete your account at any time.

Your artwork. Images you open in Tonera are processed entirely in your browser. They are never uploaded to us or anyone else, and neither are their file names.

Information you give us. When you create an account we collect your email address. When you send us a message through the contact form we collect the message and, if you choose to give it, your email address so we can reply.

Payment data. Pro subscriptions are sold and billed by Stripe, which acts as the merchant of record. Your card details go directly to Stripe; we never see or store them. We keep only a Stripe customer reference and the date your Pro plan runs until. Stripe’s privacy notice: stripe.com/privacy.

Information collected automatically. We count page views and a few anonymous events (for example, that an export happened) with Umami, which uses no cookies and does not identify you. Our hosting providers keep short-lived technical logs, such as IP addresses, to run and secure the service.

Sensitive information. We do not process sensitive information. We do not collect information about you from third parties.

We process your personal information to:

• create your account, sign you in and keep your account working;
• provide Pro, and know when your subscription is active;
• reply to messages you send us;
• understand, in aggregate, how the site is used so we can improve it;
• keep the service secure and prevent abuse;
• protect someone’s vital interests, such as to prevent harm, and comply with law.

We will only process it for other purposes with your prior explicit consent.

If you are in the EU or UK: the GDPR and UK GDPR require us to explain the legal bases we rely on:

• Contract: to provide your account and Pro subscription.
• Legitimate interests: anonymous usage statistics, security and replying to your messages.
• Consent: where we ask for it. You can withdraw it at any time (see section 14).
• Legal obligations: for example cooperating with a regulator or keeping records the law requires.
• Vital interests: where needed to protect the safety of any person.

If you are in Canada: we process your information with your express or implied consent, which you can withdraw at any time, or where Canadian law otherwise permits it, such as for fraud prevention, to comply with a subpoena, warrant or court order, or where the information is publicly available as specified by the regulations.

We share personal information only with the service providers that run Tonera:

• Supabase: accounts and the contact form database.
• Stripe: checkout, billing and subscription management.
• Cloudflare: website hosting and forwarding email sent to us.
• Umami: anonymous usage statistics.

We may also share or transfer your information in connection with a merger, sale of company assets, financing, or acquisition of all or part of our business. We do not sell your personal information.

The Services may link to third-party websites and services, such as Stripe’s checkout. We are not responsible for their content or their privacy and security practices, and this notice does not cover data you give them. Please read their policies.

We do not set cookies. Your browser stores a few things for the site to work, which never leave your device except as described:

• Sign-in session (local storage): keeps you signed in. Sent only to our account provider, Supabase.
• Ad shown (session storage): remembers you’ve already seen this session’s ad. Cleared when you close the tab.

Our analytics, Umami, uses no cookies. Stripe’s checkout runs on Stripe’s own site and follows Stripe’s cookie policy. If we start showing ads from an advertising network that uses cookies, we will update this notice and ask for consent where the law requires it before those cookies are set.

We keep your account information for as long as you have an account. When you delete your account, your email address and account record are removed straight away and any active subscription is cancelled. Stripe keeps billing records for as long as tax and accounting law requires. Contact form messages are kept until we have dealt with them.

Where information cannot be deleted right away, for example because it sits in a backup, we store it securely and isolate it from any further processing until it can be.

We use appropriate technical and organizational measures to protect your personal information, and keeping your artwork on your own computer means it is never at risk with us. Still, no transmission over the internet or storage technology is 100% secure, so we cannot guarantee that unauthorized third parties will never defeat our security.

We do not knowingly collect data from or market to children under 18, or the equivalent age in your jurisdiction. By using the Services you confirm you are at least 18, or that you are the parent or guardian of a minor and consent to their use. If we learn we have collected data from someone under 18 we will deactivate the account and delete the data. If you know of such data, contact us at our contact form.

Depending on where you live (for example the EEA, UK, Switzerland, Canada or certain US states), you may have the right to access and get a copy of your personal information, to have it corrected or erased, to restrict or object to its processing, to data portability, and not to be subject to solely automated decisions. Contact us at our contact form to make a request; we will act on it in line with applicable law.

Your account. You can change your email address or delete your account at any time from your account page. Deleting your account also cancels any Pro subscription.

Complaints. In the UK you can complain to us first; we will acknowledge your complaint within 30 days, investigate without undue delay and explain the outcome. If you are not satisfied you can contact the Information Commissioner’s Office (ico.org.uk/make-a-complaint, 0303 123 1113). In the EEA you can complain to your national data protection authority, and in Switzerland to the Federal Data Protection and Information Commissioner.

Withdrawing consent. Where we rely on your consent you can withdraw it at any time by contacting us. This does not affect processing that took place before you withdrew it, or processing based on other legal grounds.

There is no agreed standard for responding to Do-Not-Track signals, so we do not respond to them. We also do not sell or share personal information for targeted advertising, so there is nothing for Do-Not-Track or Global Privacy Control signals to switch off. If that changes, we will update this notice.

If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you may have rights over your personal information. In the past twelve months we have collected:

We use it as described in section 2 and disclose it only to the service providers in section 4, under written contracts. We have not sold or shared personal information in the past twelve months and will not do so.

Depending on your state, your rights include the right to:

• know whether we process your personal data, and access it;
• correct inaccuracies in it;
• have it deleted;
• get a copy of the personal data you shared with us;
• not be discriminated against for using your rights;
• opt out of targeted advertising, sale of personal data, or profiling with legal or similarly significant effects;
• get a list of the categories of third parties, or the specific third parties, we have disclosed personal data to, where your state’s law provides it.

To use these rights, email our contact form. We will verify your identity using information we already hold, and may ask for more if we cannot. You can use an authorized agent, who must show your signed permission. If we decline your request you may appeal by emailing us; we will explain our decision in writing, and if your appeal is denied you can complain to your state attorney general.

California “Shine The Light”. California residents may ask once a year, free of charge, which personal information we disclosed to third parties for their direct marketing in the previous year. We do not disclose personal information for that purpose.

Yes, as needed to stay accurate and compliant. The date at the top shows when it last changed. If we make material changes we will post a notice on the site or tell you directly.

Email us at our contact form, or write to:

Change your email or delete your account from your account page. For anything else, such as a copy of your data, email our contact form.