Privacy policy

Information you give us

• Sign-ups. Your email address, and your first name if you give it, when you join our letters, finish Euler's Pick, use Bloom or claim the sign-up gift.
• Your taste and your home. The answers you give in Euler's Pick: the works and feelings you choose, what you turn to art for, the room, wall and light, whether it's for you or a gift (and the occasion and its date, if you share them), what brings art into your life now, how many walls, who you live with, whether you own or rent, your budget, the promise you write, what the painting made you feel, and when you'd like our letters. We also keep the works you like or save in Bloom. With your email, we keep these with your sign-up so our picks and letters suit you.
• Orders. Your name, email address, phone number and shipping address, and what you ordered: the work, finish, frame, size and the crop you chose. Stripe collects your billing address.
• Messages. What you write when you email us.

Payment information

You pay on a checkout page run by Stripe, our payment processor. Stripe collects your card or other payment details; we receive confirmation that you paid, the amounts, and limited details such as the kind of payment method. If you pay with Klarna or Affirm, that company handles your application and repayments under its own terms and privacy policy, and may check your credit.

Information collected automatically

When you visit, our analytics providers (PostHog and Google Analytics) receive the pages you view and how you arrived (including the site that sent you and any campaign tags in the link), your clicks, scrolling and the actions you take (such as what you search for, choosing a finish or adding a print to your cart), how quickly pages load and any errors, your browser, device type, operating system, screen size and language, and your IP address, which is used to estimate your country and city. Section 7 explains how this works and what you can turn off.

The companies that host the site (Vercel, Cloudflare and Supabase) keep standard server logs, including IP addresses, to keep it secure and running. When you react to works in Bloom, we store your reactions with a random identifier made in your browser, not your name.

Information from others

Stripe tells us whether a payment succeeded and passes on the contact and shipping details you entered on its page. Our print partner and shipping carriers tell us when your order ships and how to track it.

We use your information for the purposes below. For visitors in the UK, the European Economic Area and Switzerland, the right-hand column gives our legal basis under data protection law.

We don't make decisions about you by automated means that have legal or similarly significant effects. (If you apply to Klarna or Affirm, their decision is theirs.)

We share information only with the companies that help us run EulerBloom, and only what each needs:

We require these providers to protect your information and to use it only to provide their services to us. We may also share information with our professional advisers, with authorities when the law requires it, and with a buyer if EulerBloom is sold or merged, in which case we'll tell you first.

We don't sell your personal information or share it for cross-context behavioral advertising, and we haven't in the past 12 months. We don't use advertising pixels.

• Orders and payment records: 7 years, for tax and accounting law.
• Sign-ups and your taste: until you unsubscribe or ask us to delete them. After you unsubscribe we keep only your email address on a do-not-email list, so we don't write again.
• Session recordings: 30 days.
• Analytics events: as long as they help us understand how the site is used. We review them at least once a year and delete or aggregate what we no longer need.
• Emails with us: as long as we need them to help you, and no more than 3 years after.
• Server logs: kept briefly by our hosting providers.

Cookies, analytics and recordings

Emails

Every letter has an unsubscribe link, or write to support@eulerbloom.com.

Your rights, wherever you live

You can ask us to tell you what personal information we hold about you and give you a copy, to correct it, or to delete it. Write to support@eulerbloom.com from the email address you used with us, so we can confirm the request is yours. We answer within 30 days, or as the law where you live requires. You can ask someone to act for you with your written permission. We won't treat you differently for using these rights. Some records, such as orders, we must keep for tax law even after you ask us to delete them.

United States

Several states, including California, Colorado, Connecticut, Oregon, Texas, Utah and Virginia, give residents rights to know, access, correct and delete their personal information, and to opt out of its sale, of sharing for targeted advertising, and of profiling. We don't sell or share personal information for advertising, and we don't collect sensitive personal information. In the past 12 months we have collected these categories: identifiers (name, email address, phone number, IP address); customer records (shipping address); commercial information (orders); internet activity (analytics, heatmaps and, with your consent, session recordings); approximate location (from your IP address); and inferences (your taste, from Euler's Pick and Bloom). Their sources, purposes and recipients are set out above.

If we decline your request, you can appeal by replying to our answer; if you're not satisfied with the outcome, you can contact your state's attorney general. California residents may also ask about disclosures for direct marketing; we make none.

United Kingdom, European Economic Area and Switzerland

You also have the right to restrict or object to our use of your information (including for direct marketing), to receive it in a portable format, and to withdraw consent at any time without affecting what happened before. You can complain to your data protection authority; in the UK that is the Information Commissioner's Office.

Necessary cookies and storage make the site work: your cart, your privacy choice, security, and checkout. They can't be turned off. Analytics cookies help us understand how the site is used; you can turn them off at any time by choosing necessary cookies only. Most of these items stay on your device and aren't sent to us.

Where an artwork page shows the option to pay in installments, that message comes from Stripe and loads its typeface from Google Fonts, which receives your IP address. We have turned off Stripe's extra fraud-detection signals on our own pages.

Do Not Track and Global Privacy Control. If your browser sends either signal, we treat it as a choice of necessary cookies only, and we don't ask.

You can also clear or block cookies and storage in your browser's settings; your cart and choices will then be forgotten.

We use PostHog and Google Analytics to understand how visitors use EulerBloom: which pages and works people visit and how they found us, where they click and scroll (heatmaps), where the site confuses people or breaks, which designs work better, and how many visits lead to an order. Google Analytics runs with Google's advertising features turned off, and session recordings come from PostHog only.

• Analytics and heatmaps use an analytics cookie to recognize your browser across visits. In the United States and most other places they are on unless you choose necessary cookies only. In the UK, European Economic Area and Switzerland they start only if you accept.
• Session recordings start only after you accept. A recording captures how the pages looked to you, mouse movements, clicks, scrolling, the order you moved through pages, your window size, and technical logs such as console messages and how long requests took.
• What recordings never capture: anything you type into a form, which is hidden in your browser before anything is sent; your payment, which happens on Stripe's page; and our order confirmation page, which shows your name, email and order and is left out entirely.
• With necessary cookies only, Google Analytics doesn't load at all, and PostHog only counts visits, without cookies or anything stored on your device, so we can't recognize you from one day to the next, and no recordings are made.
• Who sees this: only our team, to improve the site. It is never sold or used for advertising. Recordings are deleted after 30 days.

You can change your choice at any time in Your choices and rights.

EulerBloom isn't meant for children. We don't knowingly collect information from anyone under 13, or under 16 in the UK and European Economic Area. If you believe a child has given us information, write to support@eulerbloom.com and we'll delete it.

We're based in the United States, and our providers process information in the United States and elsewhere. When information from the UK, European Economic Area or Switzerland is transferred, we rely on the safeguards our providers offer, such as Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

The site uses encrypted connections throughout. Payments are handled by Stripe, which is certified to PCI DSS Level 1, the highest standard for card payments. Access to customer information is limited to the people who need it. Our providers encrypt stored data. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

When we change this policy we'll post the new version here with a new date. If a change matters, we'll also tell you by email or with a notice on the site.

Questions, requests or concerns: write to support@eulerbloom.com. By post: EulerBloom LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA.

See also The EulerBloom Promise for returns and shipping.