Privacy

Thirdside Works. Questions about this page: thirdsideworks@gmail.com.

You sign up with Google, which gives us your email address, your name and a link to your profile picture. We keep those and refresh them each time you sign in. Your Google password stays with Google.

There is no way to sign up with an email and a password — that sign-in exists only for the shop's own account. Our server log records the email address of each new account.

• A design keeps the words you type and the options you pick, plus the files you download and a preview picture, stored on our server.
• While you edit, the editor keeps one working draft per model.
• A QR picture you read is decoded in your browser and never uploaded. Only the text inside it is saved.
• No other account can open your designs — the shop's included.
• If you ask the shop to print a design, the link takes its design number and file name to the shop's order page.

Every credit in or out is a line in a ledger: the amount, why, when, the design and licence it paid for, when it expires, and the shop's note for a change made by hand. A download line also keeps a one-way fingerprint of the words you typed — not the words — so the same words stay free. Every line is on My credits.

You pay for a pass on PayMongo's page, by card, GCash, Maya or GrabPay. Your card or e-wallet details are typed there, not here.

We send PayMongo the price, a description of the pass, your name and email, our payment reference and your account number. PayMongo emails you the receipt.

We keep each payment's amount, status, start and paid times, and PayMongo's reference numbers; each pass's dates, price and credits; and a copy of every payment message PayMongo sends us. A checkout you leave unfinished is marked expired after 24 hours.

Only what the app needs to work. No advertising, no analytics, no tracking scripts.

• A sign-in cookie that keeps you signed in, for up to 30 days.
• Cookies the sign-in library uses while you sign in with Google, to check the sign-in started here.
• generator_draft remembers your working draft, for 30 days.
• designs_view remembers list or cards in My designs, for a year.

Google, to sign you in. PayMongo, to take payments. Sliplane, which runs this app and stores its files. And the shop's owner, who sees each account's email, name, credit balance, number of designs and payments. Nobody else — we don't sell your data or share it for advertising.

Delete my account, on My account:

• deletes your designs, drafts and their files straight away;
• removes your email, name, picture and password;
• keeps your credit history — the ledger, your payments and passes, and PayMongo's messages, which may still hold the name and email you paid with. It is the record of what was bought and what it cost, and deleting it would rewrite those totals;
• keeps a scrambled fingerprint of your email that can't be read back, only so the same address doesn't get free credits twice;
• waits if the shop is printing one of your designs, and tells you which.

It can't be undone. To delete just one design, use My designs — its files go with it.

Your account and designs: until you delete them — nothing expires on its own. Your credit history and payments: kept, even after your account is deleted; the app sets no end date. The sign-in cookie: 30 days.

Under the Philippines' Data Privacy Act of 2012 (Republic Act 10173):

• To be informed — this page.
• To access — My account, My credits and My designs. Anything else, email us.
• To correct — change your name or picture in Google; it updates when you next sign in.
• To object — email us, or delete your account.
• To erasure — Delete my account, with the credit history kept as above.
• To damages — if misuse of your data harms you, you can claim compensation. Email us.
• To complain — to the National Privacy Commission, privacy.gov.ph.

Our email: thirdsideworks@gmail.com.

When the app changes what it does with your data, this page and its date change too.