Privacy and cookies

We collect the bare minimum: your email for your account, your address for delivery. We sell no data, we display no advertising, and the site sets no tracking cookies, which is why no banner is imposed on you.

The data controller is Noor Labs Ltd (company no. 17380538, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom), reachable at hello@emoria.art. Processing is governed by the GDPR and its British equivalent (UK GDPR).

Composing asks for nothing. The editor works without an account: while you compose, everything stays in your browser.

Your email, asked for in order to export a piece or create an account (signing in is done with a code sent by email, without a password). Legal basis: performance of the contract. The pieces you choose to save are attached to that account.

Your name and delivery address, collected at checkout and passed to our printing partner, solely in order to make and deliver your piece. Legal basis: performance of the contract, then our accounting obligations for how long we keep it.

Your payment, handled by Stripe. Your card number never passes through our servers and we have no access to it.

Our emails: emails about your order or your account are sent to you as of right. Emails about what is new are sent only if you have consented to them, through a dedicated box, never ticked in advance; every send carries an unsubscribe link, and your consent is time-stamped.

Technical logs: like any site, our servers record technical events (IP address, timestamp) for security and diagnosis. Legal basis: our legitimate interest in keeping the service safe.

No one but our providers, each for its own single purpose: Hetzner (hosting, Germany), Supabase (database and authentication), Cloudflare (storage of piece files), Stripe (payment), our printing partner (production and delivery; its identity is given to you on request), Resend (sending emails). Some are established in the United States: those transfers are then covered by the recognised mechanisms (standard contractual clauses, EU-U.S. Data Privacy Framework). We neither sell nor rent your data to anyone.

Your account and your saved pieces: for as long as the account exists. You can delete it from your account, or write to us. Order data: for as long as our accounting and tax obligations require (six years in the United Kingdom). Marketing consents: until they are withdrawn.

Access, rectification, erasure, objection, restriction, portability, withdrawal of consent: an email to hello@emoria.art or a message through our contact form is enough, and we reply within one month. You may also refer the matter to a supervisory authority: the ICO in the United Kingdom (ico.org.uk), the CNIL in France (cnil.fr), or the authority of your country of residence.

The site uses only strictly necessary cookies and storage: your sign-in session, your language preference, and the contents of your basket (kept in your browser). No advertising cookie, no third-party tracker, no audience resold, which is why the site does not ask you to consent to cookies. Were that to change, this page would be updated and your consent asked for beforehand.

Audience measurement. We count visits with Umami, a tool we host ourselves, on our own server. It sets no cookie, reads no identifier from your device and does not keep your IP address: it counts page views, a country, a type of device, and nothing that could recognise you beyond the day. No data leaves our server. That is why this measurement does not ask for your consent.