Privacy policy

Effective date: November 4, 2026.

Make Your Own Legend operates Sportbound and Storybound at www.makeyourownlegend.com. This policy explains how we handle information when an adult browses, builds a card, signs in, or places an order. For privacy questions or requests, email support@makeyourownlegend.com.

Information we use

Account and contact details. We use the email address and verification code you provide to sign in. If Google or Apple sign-in becomes available and you choose it, the provider may send us an account identifier and the profile details you allow. We do not receive your provider password.

Card designs and reference photos. We use the photos, names, stories, choices, and other material you provide to make your card and its private proof. Some editing happens in your browser. When you request a machine cutout, personalized illustration, saved proof, or purchase, the necessary files and design details are sent to our private processing and storage services. Storybound likeness photos and design instructions may be sent to our AI image provider to create the requested illustration. Upload only material you have the right to use.

Public examples and customer sharing. The examples we publish on the website use AI-generated artwork. We do not post customer-provided reference photos or private card proofs in the public gallery. A customer card is shared with our production partners only as needed to fulfill its order. After purchase, a customer may download a branded image of the finished card. The image stays private to the signed-in account unless that customer explicitly creates a public share link. The public image contains no order number, address, or checkout details. Anyone with the link may view and save the card, including a likeness of a child. The customer can turn the link off in My Legend; this cannot remove copies others already saved. Creating a link does not give us permission to use a customer image in advertising. We would ask for separate, explicit permission before any such use.

Orders. We use card choices, add-ons, prices, contact and shipping details, order status, and approved production files to take and fulfill orders. Shopify handles checkout and payment information. We receive order and payment status, but do not store full payment-card numbers or security codes.

Technical data. Our hosting, authentication, and payment services may process IP addresses, device or browser information, timestamps, and security logs to operate and protect the site.

How we use and share information

We use this information to create and approve cards, run private image processing, maintain accounts and carts, complete purchases, prepare printing, ship orders, send confirmations, answer support requests, and prevent misuse. Cloudflare hosts the website and private files; Supabase manages sign-in and application records; Shopify handles checkout and order confirmation; OpenAI processes requested AI illustrations; Vograce or another selected printer receives the production files and order specifications needed to print a card; and IONOS supports our business email. These providers receive only information needed for their role. Customer reference photos are not supplied to advertising platforms as part of the card-building process.

Order notifications may be sent to the purchaser and to our business monitoring and support mailboxes. Sign-in codes go to the address used to sign in.

Site measurement, advertising and browser storage

With your permission, we measure page visits and broad card-building steps on our own site, such as loading a photo, approving a proof, adding a card and opening checkout. This uses a random browser-tab session identifier that expires after 30 minutes of inactivity. Measurement records contain only a fixed page category, step, product line, broad referral category and screen-size category, with a timestamp. They do not contain your name, email, account ID, uploaded files, card text, full page address or private proof link. These measurement records are kept in private Cloudflare storage for about 90 days. Global Privacy Control and Do Not Track stop this first-party browser measurement.

We also count verified paid Shopify orders separately for business reporting, excluding Shopify test payments. These operational totals contain no customer contact details or card artwork and are not linked to the browser-tab session identifier. They are gross recorded payments, not a refund-adjusted sales ledger.

With your permission, we use the Meta Pixel on public browsing pages to measure visits. It does not load on card builders or private proof pages. We do not send uploaded reference photos, card text, or private proof files to Meta. We do not enable advanced matching. Shopify checkout has separate privacy choices and may measure completed purchases.

You can change your marketing choice here. Declining keeps both first-party browser measurement and the Meta Pixel off this website. If you previously allowed it, turning it off stops future tracking in this browser; it cannot retract data already sent.

Allow marketing Turn off marketing

We use browser storage for local drafts, cart selections, and sign-in sessions. Clearing browser data can remove local drafts and cart contents. If you choose Save progress while signed in, we also keep your unfinished card choices and any included reference photo in private account storage so you can resume on another device. You can delete a saved card and its photo from My Legend. A saved card is not an approved proof or an order. Signing out ends access through that browser session; it does not itself erase an order or saved record.

Retention and your choices

Temporary uploads and render files are kept for limited processing and review periods. Approved proofs, production files, and order records may be kept longer to fulfill orders, support reorders, handle returns, and meet legal or accounting obligations. Local drafts remain until you remove them or clear browser data. To request access, correction, or deletion, email support@makeyourownlegend.com. We may need to verify your identity and may retain records when required for an order, dispute, security, or legal obligation.

Children and security

Accounts, uploads, proof approval, and purchases are intended to be managed by adults. Cards may feature children, but children should not upload material or create accounts themselves. A parent or guardian can contact us about a child's information. We use private storage, access controls, and encrypted connections to help protect customer materials; no online service can guarantee absolute security.

Changes

We will update the effective date when this policy changes. Questions can be sent to support@makeyourownlegend.com.