Privacy Policy

This Privacy Policy explains what information we collect when you use Name A Galaxy, why we collect it, who we share it with, and the choices you have. If you have questions, email privacy@nameagalaxy.io.

We collect information you give us directly when you place an order or create a dedication:

• Your name, email address, and shipping address. Required to fulfill your order.
• Your dedication name and optional personal message. Printed on the certificate and entered into the public registry.
• Your gift recipient’s email address, if you provide one. Used only to deliver the digital copy.
• Payment information. Collected and processed by Stripe; we never store full card numbers on our servers.

We also collect information automatically:

• Device and browser information (type, operating system, screen size), used to serve the right rendering tier and diagnose problems.
• Log data (IP address, pages viewed, timestamps), retained for security and debugging.
• Cookies and similar technologies, including a session cookie that tracks whether you’ve seen the landing animation.

We use the information we collect to:

• Process your order, including payment, printing, and shipping;
• Send you order confirmations, shipping notifications, and service emails;
• Publish your dedication in the public registry (the dedication name and galaxy only — not your email, address, or payment details);
• Respond to support requests;
• Detect, prevent, and investigate fraud, abuse, or violations of our Terms;
• Comply with our legal obligations.

We do not sell your personal information. We do not use your data to train machine learning models. We do not send marketing email without your consent.

We share information only with the service providers who help us run the business:

• Stripe, Inc. — payment processing. Stripe receives your billing name, address, email, and payment details. Handled under Stripe’s Privacy Policy.
• Printful, Inc. — print fulfillment and shipping. Printful receives your shipping name, address, email (for delivery updates), and the certificate artwork. Handled under Printful’s Privacy Policy.
• Vercel Inc. — website hosting and delivery. Vercel processes routine server logs (IP, request URL, timestamp).
• Email delivery providers — transactional email only (order confirmations, shipping notifications). Receives your email address and message contents.

We may also disclose information if required by law, legal process, or to protect the rights, property, or safety of Name A Galaxy, our users, or the public.

If we are ever acquired or merged, your information may transfer to the acquiring entity, which will be bound by this Privacy Policy or a substantially equivalent one.

The dedication name you choose and the galaxy you claim are public. They appear in the registry on our site, visible to anyone, and may be indexed by search engines. Your email, shipping address, payment details, and personal message are private and do not appear in the public registry.

If you want to remove a public dedication, email privacy@nameagalaxy.io from the address on the order. Note that removing a dedication does not refund the order (see the Terms for refund rules).

We retain information for as long as reasonably necessary to provide the service:

• Order records (including shipping details) are retained for 7 years to comply with tax and accounting requirements;
• Registry entries are permanent by design — that’s the product;
• Access and security logs are retained for up to 90 days;
• Email correspondence is retained for up to 3 years after resolution.

We use industry-standard security measures to protect your information, including HTTPS across the entire site, encrypted payments via Stripe, encrypted API keys and secrets, and access controls on our operational systems. No system is perfectly secure; we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Request correction or deletion of that information;
• Object to or restrict certain uses of it;
• Request a copy of your data in a portable format;
• Withdraw consent where we rely on it.

To exercise any of these rights, email privacy@nameagalaxy.io. We will respond within 30 days. We will never retaliate against you for exercising a privacy right.

If you are a resident of California, the European Economic Area, or the United Kingdom, you have additional rights under the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR), or the UK GDPR, as applicable. You may exercise these rights by contacting privacy@nameagalaxy.io.

For GDPR purposes, our legal basis for processing is: (a) performance of a contract, when we process your data to fulfill your order; (b) legitimate interests, when we process data to secure the site, prevent fraud, and improve the service; and (c) consent, for any other purpose (such as marketing communications), which you may withdraw at any time.

Name A Galaxy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, email privacy@nameagalaxy.io and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be posted here with a new effective date. Continued use of the service after a change constitutes acceptance.

Questions, complaints, or requests:
Name A Galaxy
Operator: Nicholas Georgalos
658 San Tomas Way, Salinas, CA 93901
Email: privacy@nameagalaxy.io
Site: nameagalaxy.io