Privacy policy

1. Data controller

Muralore is a trade name operated by an individual seller based in Alicante, Spain. For storefront and customer-account data, the store operator is the data controller.

Privacy requests can be sent to privacy@muralore.com. Order and download support should be sent to support@muralore.com.

Muralore does not publish a full street address or public phone number on the storefront.

2. Data we collect

We may process your email address, account identifier, display name, profile picture, authentication events, saved artwork, cart data, order and payment references, purchased products, download activity, support messages, consent choices, and basic technical security logs. If printed products are added later, delivery address and phone fields may be introduced and this notice must be updated first. Stripe handles payment-card data; Muralore does not store full card numbers.

3. Why we use it

• To create and secure your account and verify your identity.
• To process orders, deliver files, maintain download access, and provide support under our contract with you.
• To meet accounting, tax, fraud-prevention, security, and other legal obligations.
• To protect the service and investigate misuse based on legitimate interests.
• To send marketing only where you have actively opted in; consent can be withdrawn at any time.

4. Service providers and international transfers

We use Vercel for application hosting, Supabase for database and authentication, Stripe for payment processing, Cloudflare R2 for private file storage and signed downloads, Resend for transactional email, and Google Analytics 4 only if analytics consent is given. If you choose Google sign-in, Muralore asks Google only for standard account identity data such as email address, display name, and profile picture. Stripe Tax is not currently enabled. These providers process only the data needed for their service and may process data outside the EEA using their applicable contractual and legal safeguards.

5. Storage and retention

Account and purchase records are retained while needed to provide permanent purchase access and meet legal obligations. Payment and accounting records may be retained for the legally required period. Security logs and temporary download links are retained for shorter operational periods. Marketing data is removed or suppressed when consent is withdrawn, subject to a minimal suppression record.

6. Cookies and local storage

Essential cookies maintain secure Supabase sessions and protected order access. Browser local storage keeps cart, favorites, checkout-draft state, selected tax-estimate country, cookie-consent choices, and a first-touch campaign attribution snapshot. Referrer query strings are discarded. These are necessary or requested storefront functions, not advertising trackers.

If you allow analytics, Google Analytics 4 may measure page views, referral source, device/browser information, and broad interaction/performance signals so we can understand catalog and checkout performance. Muralore does not send email addresses, order IDs, payment data, download tokens, or support messages to analytics. Analytics can be declined or changed through Cookie settings.

Advertising storage and personalized advertising signals remain disabled unless a future advertising feature is separately documented and consented to first.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing and lodge a complaint with your local data-protection authority, including the Spanish Data Protection Agency where applicable.

8. Security and contact

We use access controls, row-level database policies, private object storage, short-lived signed links, and payment-provider controls. No system is risk-free; contact privacy@muralore.com with a privacy request or suspected privacy issue. For order or download support, contact support@muralore.com.