Privacy Policy

Last updated: October 4, 2026

ShirtDroid is a trade name of Bright City Labs, LLC ("ShirtDroid," "we," "us," or "our"). This Privacy Policy explains what information we collect when you use shirtdroid.com (the "Site") and our custom-product service, how we use it, who we share it with, and the choices you have. We've tried to write it in plain English.

If you have any questions, contact us through our contact form or by mail at Bright City Labs, LLC, 1811 Sardis Rd N, Ste 218, PMB 415, Charlotte, NC 28270.

1. Information we collect

When you use ShirtDroid, we collect:

The photo you upload. To create your product, you upload a photo. That image is the heart of what we do, and we treat it carefully — see Sections 4 and 5.
The design we generate. The artwork our system creates from your photo and prompt.
Contact and order details. Your name, email address, and shipping address, plus what you ordered and your order history. If you choose Express shipping, we also collect a phone number, which the courier requires for delivery.
Payment information. Your payment is processed by Stripe. We never see or store your full card number — Stripe handles that directly. We receive confirmation of payment and your billing/shipping address for tax and fulfillment.
Basic technical data. Like most websites, our servers automatically record limited technical information (such as IP address, browser type, and pages visited) to keep the Site running and secure. We also keep a simple daily count of how many browsers view each design, add it to a cart, or visit for the first time; these counts are totals only and are not linked to you.
Reviews you choose to submit. If you leave a review after your order arrives, we collect your star rating, anything you write, and any photo you attach. This is entirely voluntary and separate from the photo you upload to make a design — see Sections 3 and 6.
Advertising cookies and browsing activity (U.S. visitors only). If you visit from the United States and haven't opted out, the Meta Pixel sets cookies in your browser and records pages you view and shopping actions you take (see Section 7).

2. How we use your information

We use your information to:

create your custom design and produce and ship your order;
process payments and calculate any applicable sales tax;
send you order-related emails (confirmations, shipping updates, and support replies);
send you one reminder email if you create a design but don't order it (every reminder has an unsubscribe link, and unsubscribing never affects order emails); if you answer the one-question survey in that email, we keep your answer and any note with the design it was about;
send you one review request a few days after your order is delivered (it has the same unsubscribe link as the reminder above, and unsubscribing never affects order emails);
show reviews, including any photo attached to them, on our Site, and — only if you tick the separate box when you submit one — in our advertising;
respond to your questions and handle returns or claims;
keep the Site secure and working properly; and
meet our legal, tax, and accounting obligations.

We do not sell your personal information. For visitors in the United States, we share limited browsing activity with Meta (Facebook and Instagram) so we can measure our ads and show them to people likely to be interested — see Section 7 for exactly what that covers and how to opt out.

3. The photo you upload

The photo you upload often shows an identifiable person — and our service explicitly supports photos that include children. Because of that, we ask you (in our Terms and at the moment you upload) to confirm that you own or have permission to use the photo, that any person shown has consented, and that if a child is shown, you are that child's parent or legal guardian or have the guardian's permission. Please don't upload a photo of someone else without their permission.

Photos you attach to a review are different. They are voluntary, they are meant to be seen by other shoppers, and we may publish them on the Site once we have reviewed them. We ask you to make the same promises about them that you make about a design photo: that anyone pictured is happy to appear, and that you are the parent or guardian of any child shown. They are not sent to any AI provider, and they are not covered by the 90-day deletion in Section 6 — see that section for how long we keep them and how to have one removed.

4. How AI processes your photo

Your design is created using artificial intelligence. Here is exactly what that means for your photo:

Which AI services see your photo. To generate your design, your uploaded photo is sent to OpenAI and/or Google's paid AI services. These are the only AI providers that receive your original photo.
No training on your photo. We use these providers' paid, business-grade API services, which do not use the content you submit to train or improve their AI models.
No facial recognition. Our system uses AI to generate artwork from your photo. It does not perform facial recognition, create a faceprint or other biometric identifier, or attempt to identify who is in the photo.
The generated design. After your design is created, the design itself (not your original photo) may be processed by a separate image-processing service to clean up its background and increase its resolution for printing. That service does not receive your original photo.

5. Who we share information with

We don't sell your data. We do share specific information with the trusted service providers that make our service work, and only as needed to do their job. We name the providers that handle your photo, so you know exactly where it goes — the rest are described by the role they play.

Who	What they handle	What they receive
OpenAI and Google	AI design generation	Your uploaded photo and prompt
Cloudflare (R2 storage and CDN)	Image storage and delivery	Your photo and the generated design
Meta Platforms (Facebook, Instagram)	Advertising measurement and targeting, U.S. visitors only	Pages viewed, shopping actions (viewing a design, generating a design proof, adding to cart, starting checkout, completing an order and its amount), IP address, browser information, and cookie identifiers. Never the photo you upload to create a design, your design, or names entered on a design. (A photo you attach to a review may appear in our ads, but only if you tick the box that asks for that when you submit it.) See Section 7
An image-processing service	Cleaning up and upscaling the finished design for print	The generated design (not your photo)
A production & fulfillment partner	Printing and shipping your order	Your name, shipping address, phone number (Express orders), and the print-ready design (not your photo)
Stripe, our payment processor	Processing payment and sales tax	Your name, billing/shipping address, and payment details
An email provider	Sending order, reminder, and support emails, and recording when an email is opened or a link in it is clicked	Your name and email address, and whether you opened the email or clicked a link in it
Google (Gmail) and Cloudflare (Email Routing)	Etsy orders only: recovering your order's contact email from Etsy's seller notification so we can send you your proof	Your name, email, and shipping address as they appear in the Etsy sale notification
A hosting provider	Running our website and database	Order data stored on our behalf

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and property of ShirtDroid, our customers, or others.

6. How long we keep your information

The photo you upload to create your design is deleted within 90 days after your order is fulfilled (or sooner if you ask us to delete it). We keep it for that limited window to produce your order and handle any quality issues.
A photo you attach to a review is kept for as long as the review is published, and for a reasonable period afterward. It is not covered by the 90-day deletion above, because the point of a review photo is to be seen. You can ask us to take your review and its photo down at any time — see Section 9.
The generated design is kept longer so that you can reorder it or put it on other products.
Order and transaction records (name, address, phone number if provided for Express, what you bought, payment confirmation) are kept for approximately 7 years to meet tax and accounting requirements.
Reminder-email opt-outs are kept indefinitely so we can keep honoring them.
Etsy sale-notification emails forwarded to us to recover your order's contact email (Etsy orders only) are retained only as long as needed for that purpose and cleared from the receiving mailbox on a routine schedule.

You can ask us to delete your information earlier — see Section 9.

7. Cookies, tracking, and advertising

Things our own site stores in your browser. To make the Site work we keep a few things in your browser's local storage: your cart, designs you're working on, an anonymous session id, your advertising opt-out preference if you set one, and (for our staff) an admin login cookie. These are functional, are never shared, and require no consent.

Email open and click tracking. The emails we send contain a tiny invisible image and links that pass through our email provider, which tells us whether an email was opened and which links were clicked. We use this only to understand whether our emails are working (for example, whether the reminder email is useful). It involves no cookies and no advertising. Opens may be recorded even if you don't read the email, because some mail apps load images automatically. To avoid it, turn off automatic image loading in your mail app, or unsubscribe from reminder emails using the link in any reminder.

The Meta Pixel (U.S. visitors only). We advertise on Facebook and Instagram. To measure whether those ads work and to show them to people likely to be interested, we use the Meta Pixel, a small piece of code from Meta Platforms, Inc. It loads only for visitors in the United States (we ship within the U.S. only) and only if you haven't opted out. When it loads, it:

sets up to two cookies in your browser (_fbp, and _fbc if you arrived from a Meta ad), which last about 90 days;
sends Meta the pages you view and these shopping actions: viewing a design, generating a design proof, adding to cart, starting checkout, and completing an order (with the order amount and the design's catalog id); and
sends Meta the address of the page you're on, which after checkout includes an order-confirmation reference from our payment processor.

It never receives your uploaded photo, your generated design, or names or other details you type into a design. We have turned off Meta's automatic collection of button clicks and form fields. Meta uses this data under its own Privacy Policy and may combine it with your Facebook or Instagram account if you have one.

How to opt out. Any of these works:

Use our Do Not Sell or Share My Personal Information control at the bottom of this page. It stops the Pixel from loading in that browser.
Turn on the Global Privacy Control signal in your browser or a browser extension. We honor it automatically, and states that recognize it (including California, Colorado, and Connecticut) treat it as a valid opt-out request.
Manage ads across Meta's services in Meta's Ad Preferences, or use the industry opt-out at optout.aboutads.info.

8. Children's data

ShirtDroid is intended for adults (18+). We do not knowingly collect personal information directly from children under 13. When a photo includes a child, we rely on the adult customer's confirmation that they are the child's parent or legal guardian or have the guardian's permission, as described in Section 3 and our Terms.

9. Your privacy choices

No matter where you live, you can ask us to:

access the personal information we hold about you;
correct information that's wrong;
delete your information, including your uploaded photo and design (subject to records we must keep for legal and tax reasons).

To make a request, contact us through our contact form. We'll respond as required by law and won't discriminate against you for exercising these rights.

Reminder and review emails. If you created a design and didn't order, we may send you one reminder. If your order arrives, we may send you one request for a review. Use the unsubscribe link in either email to stop both; emails about orders you place are not affected.

Taking a review down. If you've left a review, you can ask us to remove it and its photo at any time through our contact form.

We do not sell your personal information. We share limited browsing activity with Meta for advertising as described in Section 7, and you can opt out at any time using the Do Not Sell or Share My Personal Information control, or by turning on the Global Privacy Control signal in your browser, which we honor as an opt-out request. California's privacy law (the CCPA/CPRA) does not currently apply to a business of our size, but we extend the core rights above to everyone as a matter of good practice. If you visit our Site from the European Economic Area or the UK, you also have rights under the GDPR (access, correction, deletion, restriction, portability, and objection); contact us as described above to exercise them.

10. Security

We use reasonable technical and organizational measures to protect your information, and we work with established providers (listed in Section 5) that maintain their own security programs. Payment card data is handled entirely by Stripe, a PCI-compliant payment processor — we never store it. No method of transmission or storage is 100% secure, but we take protecting your information seriously.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll change the "Last updated" date above and, where appropriate, let you know. Your continued use of ShirtDroid after an update means you accept the revised policy.

12. Contact us

Bright City Labs, LLC (dba ShirtDroid) 1811 Sardis Rd N, Ste 218, PMB 415 Charlotte, NC 28270 Contact us

Do Not Sell or Share My Personal Information

Opt out of sharing my browsing activity on this site with advertising partners (Meta).

This stops the Meta Pixel from loading in this browser. It applies to this site only; to manage ads across Facebook and Instagram, visit Meta’s Ad Preferences.

← Back to ShirtDroid