Privacy Policy
Last updated: 10 November 2026
This policy says what personal information The Red Thread collects, why, who helps us handle it, how long we keep it, and how to get it changed or deleted. If anything is unclear, email hello@theredthread.store and we'll explain.
1. Who we are
The Red Thread is a service of q2o, Inc., 2035 Sunset Lake Road, Suite B-2, Newark, DE 19702, USA. We decide how the information in this policy is used (we are the "controller"). Our privacy contact is hello@theredthread.store.
2. What we collect, and when
While you build your map, before you sign in: what you type stays in your own browser (in its local storage), so you don't lose it. We don't receive it until you save your progress.
When you save your progress: your email address, so we can send you a 6-digit sign-in code and keep your map safe. From then on, your map saves to our servers as you go.
Your story: both names, the places you each lived and the years, where you met, your seven places with their dates, any notes, who the map is for, the occasion and the date you need it by. You choose how personal to make it: a city, a street, a school, a house.
Photos you add: we keep them to draw from them. They're shrunk on your phone before upload.
When you order: you pay through Stripe Checkout. Stripe collects your card and billing details. We see your name, email, billing address, what you bought and the last 4 digits of your card. We never see or store your full card number.
When you write to us: your email and what you write.
3. Why we use it
| What | Why |
|---|---|
| Your email | To send sign-in codes, save your map, and send your draft, files and receipts |
| Your story and notes | To design your map |
| Your photos | To draw those places from them |
| Payment details | To charge you, send receipts and handle refunds |
| Emails you send us | To answer you |
| Basic server logs | To keep the site working and safe |
We don't sell personal information. We don't share it for advertising that follows people across other sites. We don't use your story or photos to train AI models of our own.
4. Who helps us
These companies handle information for us, only to provide their service, under their own security and privacy commitments:
| Company | What for | Where |
|---|---|---|
| Vercel | Hosts theredthread.store | USA and global network |
| Cloudflare | Stores your story, your photos and your map files (Cloudflare R2), and runs our domain | USA and global network |
| Stripe | Payments and receipts | USA |
| Resend | Sends our emails: sign-in codes, your draft, your files | USA |
| Our email inbox; and Google's AI image tools, which receive a photo you sent only to help create the drawing of that place | USA | |
| Namecheap | Our domain name registration | USA |
We'll also share information if the law requires it, to protect our rights or someone's safety, or if The Red Thread is sold or reorganized (we'd tell you first).
5. Cookies and your browser
We set one cookie, rt_session, only after you sign in with a code. It keeps you signed in for up to 60 days, so you can come back to your map. It's needed for the site to work, and it isn't used for tracking or ads. Before you sign in, your unfinished map is kept in your own browser's local storage. We run no ad tracking. Stripe sets its own cookies when you pay.
6. How long we keep it
- Photos you sent: deleted after we deliver your final files.
- A map you started but didn't order: deleted after 90 days without changes. Ask, and we delete it sooner.
- Your story and your map files, after you order: up to 12 months, so your order page keeps working and you can download or reorder. Ask, and we delete them sooner.
- Payment records: 7 years, because tax law requires it.
- Emails with us: up to 2 years.
- Server logs: up to 30 days.
7. Your rights
Wherever you live, you can ask us to:
- tell you what we have about you, and give you a copy;
- correct it;
- delete it;
- stop emailing you (other than emails about an order you placed).
Email hello@theredthread.store. We answer within 30 days, usually much sooner. We may ask you to confirm who you are. We won't treat you differently for using your rights.
California and other US states with privacy laws. We give you the rights these laws describe, whether or not they apply to us: to know, delete, correct and get a copy of your personal information, and to opt out of its "sale" or "sharing" for targeted advertising. We don't sell or share it, so there's nothing to opt out of. We honor Global Privacy Control signals. We collect no sensitive personal information beyond what you choose to put on your map.
8. If your partner is on the map
A map has two people on it. The person who orders confirms the other is happy with their name and places being used (it's usually a gift, so a surprise is fine). If you're the other person and want something removed or deleted, email us and we'll take care of it.
9. Security
Everything moves over encrypted connections. Your map, photos and files are only reachable when you're signed in with your email code; links on their own don't open them. Only the people making your map can see your story and photos. No system is perfect; if a breach affects you, we'll tell you as the law requires.
10. Children
The Red Thread is for adults. We don't knowingly collect information from anyone under 18.
11. Changes
We post updates here. For a big change, we email customers before it applies.
Contact: hello@theredthread.store
Questions? hello@theredthread.store