Legal
Privacy
Working draft · 28 August 2026
What we collect
To operate a sponsorship purchase we process the buyer's brand name, logo, destination website, placement details, timestamps, payment-provider references and at least one contact method: an email address or X handle. Card numbers remain with Stripe and never reach BrandMyKeycaps.
What becomes public
While a cap is reserved and after payment, the brand name, logo, destination website and submitted X handle may appear publicly on the selected placement. Email addresses and payment references are never published.
Service providers
- Neon stores inventory, purchase and moderation records.
- Vercel Blob stores submitted brand assets.
- Stripe processes purchases.
- Vercel hosts the application and standard server logs.
Retention and rights
Placement and financial records are retained only as long as required to deliver the sponsorship and meet accounting obligations. Contact the campaign operator to request access, correction or deletion where applicable.
Security
Private assets are access-controlled, server credentials never ship to the browser, payment webhooks are signature-verified, and tenant data is protected with database row-level security.