Privacy policy
Last updated: September 23, 2026
This Privacy Policy explains how VialArt™ (“we,” “us,” “our”) collects, uses, shares, and protects information when you visit or order from vialart.com. We are based in Nevada, United States.
Information we collect
- Order & contact details you provide — name, email, shipping/billing address, and phone number.
- Payment information — processed by our payment providers; we do not store full card numbers.
- Label content you create — the text, dates, codes, design selections, uploaded images, and logos you submit for your custom labels, plus the saved design record that lets you reorder or edit a design later.
- Device & usage data, collected automatically — IP address, browser and device type, referring page, pages viewed, and interactions with our label designer, through the technologies listed below.
Cookies, analytics & advertising
This table names every non-essential technology we currently use on this site, what it does, and the main cookies it sets. Where our cookie banner is shown, the third-party advertising and analytics technologies below — Meta, TikTok, Google, Microsoft Clarity and the OpenAI pixel — are withheld until you choose “Accept”; Microsoft Clarity and our own label-designer analytics event wait for your “Accept” everywhere, whether or not a banner is shown. Shopify’s own first-party store analytics, described in its row below, runs on every visit as part of operating the store, and the Instagram feed widget, Judge.me reviews and Cloudflare load with the page.
| Provider | What it does | Main cookies |
|---|---|---|
| Microsoft Clarity | Session recording and heatmaps, loaded only after you choose “Accept” on our cookie banner — never before you choose, never on “Decline”, and never when your browser sends a Global Privacy Control signal. When it runs, it records how you move, click, scroll and navigate on our pages so we can see where the label designer is confusing. We mark the text you type into the designer, your label previews, your uploaded artwork and your cart contents so that Clarity masks them in replays. That masking is applied by our own code on a best-effort basis, so please do not enter anything in the designer that you would not want recorded. If you accept and later decline, we stop the recorder on that page, delete the Clarity cookies set on vialart.com, and load nothing on your next page. Microsoft keeps individual recordings for 30 days (a sample of recordings and heatmap data for up to 9 months), stores them on Microsoft Azure in the United States, and processes them as an independent controller under the Microsoft Privacy Statement; Microsoft does not offer deletion of a single visitor’s recordings, which instead expire on that schedule. We removed Clarity on 17 September 2026 and reinstated it on 21 September 2026 on this accept-first basis. | _clck, _clsk (plus MUID, CLID, ANONCHK, SM and MR, set by Microsoft on its own domains) |
| Meta (Facebook & Instagram) | Advertising and conversion measurement, through both a browser pixel and a server-side Conversions API integration. Used to measure our ads and show you ads on Meta platforms. | _fbp, fr |
| TikTok | Advertising and conversion measurement for TikTok campaigns. | _ttp |
| Google Ads & Google Marketing Platform | Conversion measurement and remarketing, including DoubleClick. Used to measure our ads and show you ads on Google properties and partner sites. | _gcl_au |
| Google Analytics 4 | Website analytics — traffic sources, pages viewed, and purchase measurement. | _ga, _ga_<id> |
| Google Merchant Center | Product listing and shopping campaign measurement. | set by Google |
| OpenAI advertising measurement | We advertise on OpenAI’s ChatGPT platform and use its measurement pixel, which may receive page view, checkout, and order information such as order value, currency, and items purchased. The page-view tag we place on our own pages is loaded only after you choose “Accept” on our cookie banner — never on “Decline” or with a Global Privacy Control signal. Checkout and order events are sent through Shopify’s customer-events system, which applies the consent choice recorded for your region. | set by OpenAI |
| Judge.me | Collects and displays product reviews, and receives store events so a review request can be sent after your order. | set by Judge.me |
| Shopify | Our e-commerce platform — essential store, cart, checkout and Shop Pay functions, plus its own first-party store analytics. | _shopify_y, _shopify_s, _shopify_essential, cart |
| NFcube (Instafeed) | Displays our Instagram feed on the storefront. | set by NFcube |
| Cloudflare | Security, bot protection, and hosting of our label design service. | __cf_bm, _cfuvid |
Some of these providers are located outside your state or country, and information shared with them may be processed in the United States and elsewhere.
What you type into the label designer
The label designer sends a small analytics event to VialArt’s own servers as you build a label, so we can see where people get stuck. It is sent only after you have chosen “Accept” on our cookie banner — not before you choose, and never if you choose “Decline” or send a Global Privacy Control signal. That event includes the product name you type and which design you chose. It is first-party: it goes to us, and we do not pass it to any advertising network. Until 17 September 2026 this name was also included in an event sent to Google Ads; that has been removed, and the name is no longer shared with Google or any other ad platform. Your finished artwork and label text are covered separately under “Your label content & uploaded artwork” below.
Your choices about tracking
- Use the cookie banner. Session recording (Microsoft Clarity) starts only if you choose Accept. Declining withholds consent for analytics and advertising technologies; if you accepted earlier, declining stops the recorder on that page and nothing is loaded on your next page. If you use “Manage preferences” to allow some purposes and not others, we honour each choice separately.
- Use Your Privacy Choices to opt out of the sale or sharing of your personal information for targeted advertising.
- Send a Global Privacy Control signal. If your browser or extension sends a GPC signal, we treat it as a request to opt out for that browser and device, and we do not load session recording. Learn more at globalprivacycontrol.org.
- Use your browser settings to block or delete cookies. Some site features may not work without them.
Sale & sharing of personal information
We do not sell your personal information for money. However, our use of the advertising and analytics technologies listed above means identifiers and activity information about your visit are disclosed to those advertising partners. Under California law and several other state privacy laws, that disclosure may be treated as a “sale” of personal information or as “sharing” for cross-context behavioral advertising. We describe it plainly here so you can make an informed choice, and you can opt out at any time using the options above.
What “Decline” actually does. If you decline on our cookie banner, or send a Global Privacy Control signal, the third-party advertising and analytics tools above are not loaded (if you accepted earlier on the same page, Microsoft Clarity is stopped and the OpenAI pixel stops receiving events from us, although its script stays on the page you are already on until you navigate), and the identifier cookies those tools stored on vialart.com — including Meta, Google, TikTok and Microsoft identifiers — are deleted from your browser. Cookies a provider sets on its own domain are governed by that provider’s policy and your browser settings. Shopify’s own store, cart and checkout functions, our Instagram feed widget (NFcube), Judge.me reviews and Cloudflare security continue to load, because the page cannot display or transact without them. Shopify also runs its own first-party store analytics on every visit; it is described in the table above and is not used to show you ads elsewhere. Cookies needed to run the cart, checkout and your language and currency choice are kept, because the site cannot function without them.
We do not knowingly sell or share the personal information of anyone under 16 years of age.
How we use information
- To process, produce, and deliver your orders, and to provide customer support.
- To communicate with you about your orders and, where permitted, marketing you can opt out of at any time.
- To operate, secure, and improve our website and label designer, and to prevent fraud.
- To review custom label content for compliance with our label terms and applicable law. This uses automated screening, including an artificial-intelligence screening service provided by Anthropic, together with human review. Uploaded artwork and label text may be processed for this purpose, and we keep a random device identifier in your browser (
va_fp) so that repeated attempts to order prohibited content can be recognised; it is used only for this screening and is not shared with advertising partners. - To comply with legal obligations and to establish, exercise, or defend legal claims.
How information is shared
We share information with service providers who help us run our business: our e-commerce platform (Shopify), payment processors, shipping carriers, printing and fulfillment systems, cloud hosting and security providers, and our compliance-screening provider. We also disclose information to the analytics and advertising partners named above; some of them, including Microsoft, act as independent controllers of that information rather than as our service providers. We may also disclose information to comply with law, enforce our terms, protect our rights or the rights of others, or in connection with a merger, acquisition, or sale of assets.
Your label content & uploaded artwork
The text, images, and logos you submit are stored so we can produce your order, let you reorder or edit a saved design, and keep a production record. Saved designs are reachable through a design identifier. Please do not upload content you are not authorized to use, and do not include sensitive personal information in your label text.
Data retention & security
We keep information for as long as needed to fulfill the purposes described here and to meet legal, tax, accounting, and reporting requirements, after which we delete or de-identify it. We use reasonable administrative and technical safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights
Depending on where you live, you may have the right to:
- Access or receive a copy of the personal information we hold about you, including the categories we collect, use, and disclose.
- Correct inaccurate personal information.
- Delete personal information, subject to legal exceptions. Where information sits with an advertising or analytics partner that acts as an independent controller rather than as our service provider, we will pass on your request and stop further collection from your browser, but those partners set their own retention and do not all offer deletion of an individual visitor’s records; Microsoft, for example, does not offer deletion of a single visitor’s Clarity session recordings, which instead expire on the schedule described in the table above. You can also exercise your rights directly with each partner.
- Opt out of targeted advertising and of the sale or sharing of personal information.
- Receive your information in a portable format.
- Be free from discrimination for exercising these rights.
California residents may exercise rights under the CCPA as amended by the CPRA, including the right to opt out of sale and sharing and to limit certain uses of sensitive personal information. Nevada residents may submit a request not to sell certain personal information under NRS 603A.340. Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws have comparable rights, including the right to appeal a decision on a request.
If you are in the European Economic Area or the United Kingdom, we process personal information to perform our contract with you, to comply with legal obligations, with your consent where required, and for our legitimate interests in operating and improving our business. You may object to processing, withdraw consent at any time, and lodge a complaint with your local supervisory authority. International transfers are made under appropriate safeguards, including standard contractual clauses.
To make a request, use our contact form. We will verify and respond as required by applicable law, and you may use an authorized agent where the law permits.
Children
Our site is intended for adults and is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes
We may update this policy from time to time. We will post the revised policy on this page, update the “last updated” date above, and give additional notice where required by law.
Contact
Questions about this policy or our privacy practices? Use our contact form and we will respond.