Back to the studio

Memora Studio

Privacy Policy

Last updated: November 9, 2026

In short

We collect only what we need to create and deliver your artwork: your name, email, the places you chose and the order details. Payments go through Stripe or Paddle; we never see your card number. We use no tracking or advertising cookies, and we do not sell data.

1. Controller

Memora Studio is the controller of the personal data processed on this site. For any privacy matter, including exercising your rights, use the form on the Contact page.

2. Data we collect

  • Order: name, email, language, the places (with state and country for neighborhoods), coordinates, style and format of the artwork, chosen tier, amount, currency, payment status, and the date and version of the Terms you accepted.
  • Payment: transaction identifiers and the type of payment method, sent to us by Stripe or Paddle. Card details are entered directly with them and never reach us.
  • Contact: name, email, subject, message and order number, when you use the Contact page.
  • Technical data: your approximate country, derived from your IP address by our hosting provider, to set currency and language; and your IP address and email turned into an irreversible code (hash) to limit abuse such as mass orders. Each time the file is downloaded we record the date, time, hashed IP address and browser used, as proof of delivery. Our hosting providers also keep technical access logs.

3. Data stored in your browser

The editor saves the places, style, preview, and the name and email typed at checkout in your browser's local storage (localStorage), so you do not lose your work when you reload the page. This data stays on your device and only reaches us when you place an order. You can erase it by clearing this site's data in your browser.

We use no tracking, analytics or advertising cookies. The Stripe and Paddle payment pages may use their own cookies, needed for payment security.

4. Why we use the data

  • To create, deliver and support your artwork and send order emails (performance of a contract).
  • To meet legal, tax and accounting obligations (legal obligation).
  • To prevent fraud and abuse and protect the site (legitimate interests).
  • To answer your messages (contract or legitimate interests, as the case may be).

We do not send marketing emails without your consent and we do not make automated decisions that significantly affect you.

5. Who we share it with

Only with the providers the service needs to work (such as hosting, maps, payments and email delivery), which process the data on our behalf.

We do not sell or rent personal data.

We may disclose it where the law or an order from a competent authority requires.

6. International transfers

Some of these providers process data outside Brazil or your country, mainly in the United States and the European Union. Such transfers rely on the safeguards provided by the LGPD and the GDPR, such as standard contractual clauses.

7. How long we keep it

  • The artwork file: 12 months from the order; after that it is removed from our servers. Paid orders and the download record: for the period required by tax law (in Brazil, generally 5 years).
  • Orders started but not paid: deleted automatically within a few days.
  • Usage-limit records (hashed IP/email): deleted periodically, within a few days.
  • Contact messages: for as long as needed to handle your request and any follow-up.

The emails we send, including the delivery email with the file link, remain in your inbox and we cannot delete them.

8. Your rights

Under the LGPD (Brazil), the GDPR (European Union), the UK GDPR (United Kingdom) and the privacy laws of your country, you may ask for access to your data, correction, erasure, portability, information about sharing, objection to processing and withdrawal of consent. Some data may be kept where the law requires, such as tax records.

To exercise your rights, use the form on the Contact page. You may also complain to a data protection authority: in Brazil, the ANPD; in the European Union and the United Kingdom, the authority of your country.

9. Security

We use encrypted connections (HTTPS), private file storage, personal download links and restricted access to data. No system is completely immune to incidents; if one could affect you, we will notify you as the law requires.

10. Children

The site is not aimed at anyone under 18. Minors should only place orders with the involvement of a parent or guardian.

11. Changes

We may update this policy. The current version is always on this page, dated at the top.