✦ Official Bureau document ✦
Privacy Policy
Last updated: July 4, 2026
The short version: we collect the minimum needed to sell you a
certificate — an email address, the name you certify, and payment handled entirely by
Stripe. We don't sell data. Certificate pages are public by design (that's the point).
What we collect
- Account & purchase data: your email address and the subdomain name you purchase. Payment card details go directly to Stripe — we never see or store them.
- Certificate content: the name on the certificate and any customization you choose. Certificate pages are public web pages.
- Shipping address (framed keepsakes only): if you order a physical framed certificate, Stripe collects a shipping name, postal address, and phone number, which we pass to our print-on-demand partner solely to print and mail your order. We store it only to fulfil and support that order.
- Usage analytics: we use Google Analytics 4 to understand how visitors find and use the site (pages viewed, referral source, approximate region). GA4 does not log full IP addresses. We run no advertising, so no ad or cross-site tracking storage is ever used. In the EEA, UK, and Switzerland analytics cookies are off until you accept the consent banner (Google Consent Mode v2); elsewhere they are on by default and you can decline at any time.
- Operational logs: our host, Cloudflare, processes request metadata (IP, user agent) to serve and protect the site.
Who processes it
- Stripe — payments and billing management (Stripe privacy policy)
- Cloudflare — hosting, DNS, email delivery infrastructure
- Google Analytics — aggregate usage analytics
- Prodigi — print-on-demand fulfilment for physical framed keepsakes; receives your shipping details only when you order one (Prodigi privacy policy)
What we don't do
- We do not sell or rent personal data. Ever.
- We do not run third-party advertising or tracking pixels.
- We do not send marketing email — only transactional messages about your certificate and billing.
Retention & deletion
Purchase records are kept while your registration term is active and as required for tax
and accounting afterwards. To delete your account data or take down a certificate, email
support@isreallyamazing.com and a clerk
will handle it within 7 days.
Your rights
You may request a copy, correction, or deletion of your personal data at any time via
support@isreallyamazing.com. If you're in
a jurisdiction with specific privacy rights (GDPR, CCPA), those rights apply and we honor them.
You can change your analytics choice whenever you like:
manage privacy choices.
Contact
The Bureau's privacy desk: support@isreallyamazing.com