Privacy
Last updated: 28 August 2026
The short version
We collect what an order needs and nothing else. We don’t sell data, we’ve never sold data, and there are no advertising or tracking networks on this site. The page-view counter runs on our own server and doesn’t use cookies or store anything that identifies you.
1. Who’s responsible
ConnectEngine LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States, trading as Warp Art.
Contact for anything on this page: hello@warp-art.com
ConnectEngine LLC is based in the United States. If you’re in the EU, EEA, UK or Switzerland, that means your data reaches a country outside your own. We do that on the basis of the contract you enter into when you order (GDPR Art. 6(1)(b)) or your consent (Art. 6(1)(a)), and we keep the amount of data involved as small as the order allows.
2. Server logs
Every time a page loads, the web server writes a line to a log file: your IP address, the time, the page requested, the referring page, your browser’s user-agent string. This is how web servers work, and we use it for exactly three things: keeping the site up, keeping it secure, and working out why something broke.
- Why we’re allowed to: legitimate interest in running a secure, working website (GDPR Art. 6(1)(f)).
- How long: log files rotate and are deleted on the host’s normal schedule, typically within 7 to 30 days.
- Where: the site runs on a rented managed server. The hosting provider processes those logs on our behalf under its own data-processing terms.
3. When you order
To fulfil an order we process: your name, email address, shipping address, billing address if it differs, what you bought, the size, the amount paid, and the order number. We also keep the order itself, because tax and accounting rules say we have to.
- Why: to perform the contract you entered into (Art. 6(1)(b)), and to meet legal record-keeping duties (Art. 6(1)(c)).
- How long: for as long as US record-keeping and tax rules require, then deleted.
- Stored in: the WooCommerce order tables in this site’s own database, on the same server as the site.
3.1 PayPal
Payments go through PayPal. When you pay, you’re dealing with PayPal directly. We never see or store your card number. PayPal tells us whether the payment succeeded, and gives us a transaction reference.
PayPal is its own controller for what it does with your data, under its own privacy policy at paypal.com. Legal basis: performing the contract (Art. 6(1)(b)).
3.2 Printful
Nothing is printed until you order it. To get your order made and shipped, we send your name, shipping address, email address, and the items you ordered to Printful, our fulfilment partner, who prints it and ships it to you. Printful acts as a processor on our instructions. Legal basis: performing the contract (Art. 6(1)(b)).
Printful operates production facilities in several countries, and your order ships from whichever one is nearest to you. That means your address may be processed outside your own country, including in the United States.
3.3 Order emails
Order confirmations, shipping notices and password resets are sent by email from this site through a mail relay, which handles the message in transit and nothing else. None of those emails are used for marketing.
4. When you use the contact form
We process the name, email address, order number and message you type in, so we can answer you. Legal basis: performing or preparing a contract (Art. 6(1)(b)) and our legitimate interest in answering people who write to us (Art. 6(1)(f)). Messages are deleted once the conversation is over and there’s no reason to keep them.
The form is protected by a hidden field that only an automated script would fill in, plus a rate limit. Nothing about your message is sent to a third-party spam service.
5. Cookies
| What | Why | Set by | Consent needed |
|---|---|---|---|
| Cart and session cookies | keeps what’s in your cart and your checkout progress | WooCommerce | No, strictly necessary |
| Login cookie | keeps you signed in, only if you make an account | WordPress | No, strictly necessary |
| Consent record | remembers what you chose in the cookie banner, so we don’t ask again | Complianz | No, strictly necessary |
That’s the whole list. There are no advertising cookies, no remarketing pixels, no Meta pixel, no Google Analytics, no TikTok pixel, and no social-media embeds that set cookies. The cookie banner on this site exists to tell you that and to record your choice, not to hide fifty vendors behind a “legitimate interest” toggle.
Full details, including cookie names and lifetimes, are on the Cookie Policy page, which Complianz generates and keeps current.
6. Statistics
We count page views with Koko Analytics, which runs on our own server. It sets no cookies, stores no IP addresses, and builds no profile of you. It records that a page was viewed, and where the visit came from at the level of “a search engine” or “another site”. Nothing in it can be traced back to a person, which is why it doesn’t need your consent.
If you opt in to statistics in the cookie banner, we also run Google Analytics. It sets cookies (_ga, _ga_3HZ3319VLR, kept up to 400 days) and sends visit data to Google LLC in the USA. Nothing loads from Google until you say yes, and you can change your mind any time under Manage consent.
7. Fonts and scripts
The two typefaces on this site (Bricolage Grotesque and Archivo, both under the SIL Open Font License 1.1) are served from our own server. So is every script, with one exception: say yes to statistics in the cookie banner and Google’s analytics script loads from Google’s servers. There is no Google Fonts connection, no jQuery CDN, and no image CDN, so loading a page here doesn’t hand your IP address to a third party.
8. Your rights
Under the GDPR you can ask us to:
- tell you what data we hold about you, and give you a copy;
- correct anything that’s wrong;
- delete it, where we’re not legally required to keep it;
- restrict what we do with it;
- hand it over in a portable format;
- object to processing we base on legitimate interest.
You can withdraw consent at any time, and that doesn’t affect anything we did before you withdrew it. Email hello@warp-art.com and say what you want. You don’t need a formal letter or a template. You also have the right to complain to a data protection authority in your country.
9. If you’re in California
Under the CCPA and CPRA you can ask what personal information we collected about you in the last twelve months, ask us to delete it, ask us to correct it, and ask us not to sell or share it.
We don’t sell personal information and we don’t share it for cross-context behavioural advertising. There is nothing on this site that would make that possible. The “Do not sell or share my personal information” control in the cookie banner is there because the law expects it to be, not because anything is being sold. Exercising any of these rights will never get you worse service or a worse price.
10. Accounts and how you sign in
Accounts are optional; guest checkout works fine. If you make one, we store your email address, a hashed password, and the addresses you saved.
There is no social login on this site. No Google, no Apple, no Facebook, no GitHub. Email and password only. That’s a deliberate choice: social login would tell those companies where you shop.
11. Children
This shop isn’t aimed at children and we don’t knowingly collect data from anyone under 16. If you think we have, email hello@warp-art.com and it gets deleted.
12. Changes
We update this page when the site changes or the rules do. The version published here is the one that applies. Material changes get a new “last updated” date at the top.
Not legal advice
Written in plain English, in good faith, by the person who runs the shop. It describes what actually happens to your data. It isn’t legal advice.