Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains how Posteritati ("Posteritati," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit posteritati.com (the "Site"), use the Posteritati iOS app (the "App"), visit our gallery, buy from us, sell to us through our marketplace, or contact us. The Site and the App are together the "Services."

By using the Services you acknowledge the practices described here. If you do not agree with them, please do not use the Services.

WHO IS RESPONSIBLE FOR YOUR DATA

Posteritati is the "controller" (under the EU and UK General Data Protection Regulation, "GDPR") and the "business" (under the California Consumer Privacy Act, "CCPA") responsible for your personal information.

Posteritati 239 Centre St, FL 4 New York, NY 10013, United States gallery@posteritati.com +1 (212) 226-2207

PERSONAL INFORMATION WE COLLECT

Information you give us

• Account information: email address, password (stored only as a one-way hash), username, first and last name, and phone number.
• Public profile information (optional): profile picture, bio, location, and website. You choose what to add.
• Collection, wants, likes, and lists: posters you like, want, or list as part of your collection (including captions, notes, condition details, and photos you upload), and any lists you create. You can mark lists private, and you can make your whole profile private.
• Wall photos: photos of your posters on your wall that you upload, along with captions and the posters you tag in them.
• Order information: name, billing and shipping address, email address, phone number, the items you order, and payment details (see "Payments" below). We call this "Order Information."
• Marketplace information (sellers and buyers): offers and counteroffers, accepted prices, fees and payouts, the "ship from" address a seller provides, shipping labels and tracking, and photos and condition information about items. Sellers who want to be paid also complete identity and bank verification with Stripe (see "Payments").
• Gift card information: purchaser, recipient name and email or postal address, message, amount, and redemption history.
• Communications: messages you send through contact forms, poster enquiries, "share a poster" emails, email, phone, or text message, and your communication preferences.
• Poster restock alerts and newsletter: email addresses you give us to be notified about a poster or to receive our newsletter.

Information collected automatically

• Device and usage information ("Device Information"): IP address, browser or device type and operating system, approximate location derived from IP address, time zone, referring and exit pages, pages and posters viewed, search terms, and date and time stamps.
• App information: when you sign in to the App we record the device name you give it and create a secure access token for that device. If you enable push notifications we collect a push notification token for your device (a random identifier issued by Apple and our notification provider) and the date it was last used. The App also keeps your cart on our servers when you are not signed in, identified by a random cart token stored on your device.
• Account activity: your last login time and your likes, views, and similar activity, which we use (in aggregate) to rank posters by popularity.
• Fraud-prevention signals: IP address recorded with payment attempts and a reCAPTCHA risk score on forms.

Information from third parties

• Payment processors tell us whether a payment succeeded and the last digits and brand of your card.
• Shipping carriers and our shipping tools (EasyPost, ShipStation, UPS, and other carriers) provide delivery status, tracking, and address verification.
• If you buy as a guest and later create an account with the same email address, we link your past orders to your account.

What we do not collect

We do not collect your precise location. The App does not request access to your contacts. The App accesses your photo library or camera only when you choose to upload a photo, and only the photo you select. We do not use the advertising identifier (IDFA) in the App and do not track you across other companies' apps and websites.

COOKIES AND SIMILAR TECHNOLOGIES

The Site uses:

• Strictly necessary cookies to keep you signed in, keep your cart, protect against cross-site request forgery, and remember your cookie choices. These do not require consent.
• Performance and analytics cookies and tags (Google Tag Manager, Google Analytics, and Facebook/Meta tools) that tell us how the Site is used and how our marketing performs. We set these only if you opt in through the cookie banner. Until then, Google's analytics storage is denied. You can change your choice at any time using the cookie settings link or by clearing your cookies.
• Google reCAPTCHA on forms to detect spam and abuse. reCAPTCHA collects hardware and software information and is subject to Google's privacy policy and terms.

The App does not use advertising or cross-app tracking. Infrastructure and operating-system providers, such as Apple, may collect diagnostic data under their own policies.

HOW WE USE YOUR PERSONAL INFORMATION AND OUR LEGAL BASES

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process personal information only where a legal basis applies:

If you are in California, see the "California Privacy Rights" section below.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. We use automated tools (such as a reCAPTCHA score or payment-processor risk checks) to flag suspicious activity, and a person can review any decision on request.

Marketing and promotions

We may send you information or advertising about our products and services where you have opted in or where the law otherwise permits. You can opt out at any time using the unsubscribe link in each email, by changing your notification settings on your device (for push notifications), by replying STOP to a text message, or by contacting us.

Text messages (SMS)

When you sign up for SMS communications, we collect the information you provide (such as name, email address, and phone number) and use it to provide and manage our services (such as scheduling appointments), respond to inquiries, send updates you have opted to receive, and, if you opt in, contact you about offers. Message frequency may vary; message and data rates may apply. Reply STOP to opt out or HELP for help. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

PAYMENTS

We use Stripe (cards, Apple Pay, Klarna, and Stripe Connect for marketplace seller payouts) and PayPal to process payments. Your full card number is entered directly with the payment provider and is not stored on our servers. We receive confirmation of payment, card brand and last four digits, and billing details. Apple Pay card details are handled by Apple and Stripe, not by us.

Seller payouts: to receive marketplace payouts a seller creates a Stripe Express account. Stripe collects the seller's legal name, date of birth, address, tax identification information, and bank account details under Stripe's own terms and privacy policy. Stripe acts as an independent controller for that verification. We receive only the account identifier and whether payouts are enabled.

Stripe: https://stripe.com/privacy. PayPal: https://www.paypal.com/us/legalhub/privacy-full. Klarna: https://www.klarna.com/us/legal/. Apple: https://www.apple.com/legal/privacy/.

WHO WE SHARE YOUR PERSONAL INFORMATION WITH

We do not sell your personal information, and we do not share it for cross-context behavioral advertising except for the opt-in analytics and marketing tags described above. We share it as follows:

• Service providers (processors). Companies that act on our instructions, including: payment processors (Stripe, PayPal, Klarna, Apple Pay); shipping and logistics providers (EasyPost, ShipStation, UPS, and other carriers); email delivery providers; cloud hosting and file storage (Amazon Web Services); our newsletter provider (Mailchimp); push notification delivery (Expo and Apple Push Notification service); and security services (Google reCAPTCHA).
• Analytics and advertising partners (with your consent). Google (Google Tag Manager and Google Analytics) and Meta (Facebook). Opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
• Other users. Information you choose to make public (see below). Marketplace users also see limited information about each other's offers, such as the other party's username and the item and price, but not your address; we handle shipping on both sides.
• Business transfers. If Posteritati is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.
• Legal and safety. To comply with applicable laws and regulations, to respond to a subpoena, court order, search warrant, or other lawful request, to enforce our Terms, or to protect the rights, property, or safety of Posteritati, our users, or others.

What is public

If your profile is public, anyone (including people without an account, and search engines) may see your username, profile picture, bio, location, website, collection, wants, likes, public lists, and wall photos (including captions and the posters tagged in them). Wall photos can only be uploaded while your profile is public. You can set your profile and individual lists to private at any time in the App or on the Site. Content others have already copied, shared, or saved may remain visible after you remove it. Please do not post photos that show people, addresses, or other sensitive details.

INTERNATIONAL TRANSFERS

We are based in the United States, and your information is processed in the United States and in other countries where our service providers operate. If you are in the EEA, the United Kingdom, or Switzerland, your information is transferred outside those regions. Where required, we rely on safeguards recognized by law, such as the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where the recipient participates, or the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum). You can contact us for a copy of the relevant safeguards.

RETENTION

• Account data is kept while your account is open. When you ask us to delete your account we delete or de-identify it within 30 days, except as described below.
• Order, invoice, gift card, and marketplace transaction records (including Order Information) are kept for as long as needed to meet tax, accounting, and legal obligations and to handle returns and disputes, which is generally up to seven years.
• Wall photos and collection photos are kept until you delete them or your account. Photos attached to a marketplace sale may be kept with the transaction record.
• Device and push tokens are removed when you sign out of the App, disable notifications, or when Apple reports them invalid.
• Server logs and security data are kept for a limited period that is no longer than needed for security and troubleshooting.
• Newsletter and marketing data are kept until you unsubscribe.
• Backups are kept for a limited time and then overwritten.

YOUR RIGHTS AND CHOICES

Everyone. You can view and update your account details, profile, and privacy settings in the App or on the Site (Account). You can unsubscribe from marketing emails, switch off push notifications in iOS Settings, remove a device token by signing out, change cookie preferences, and delete content you posted.

EEA, UK, and Swiss residents. You have the right to: access your personal information; correct it; delete it; restrict or object to processing (including processing based on our legitimate interests and direct marketing, which you can object to at any time without giving a reason); receive your data in a portable format; and withdraw consent at any time (withdrawing does not affect processing before withdrawal). You also have the right to lodge a complaint with your local data protection authority (a list for the EU is at https://edpb.europa.eu/about-edpb/about-edpb/members_en; in the UK, the Information Commissioner's Office at https://ico.org.uk). Providing the information required to place an order or create an account is necessary to enter a contract with you; without it we cannot provide those services.

Account deletion. To delete your account and request erasure of your data, email gallery@posteritati.com from the address on your account, or write to us at the address above. We will confirm your identity and complete the request within 30 days (one month under GDPR, extendable where permitted by law). We may keep information we must retain by law or need for legitimate purposes such as fraud prevention, disputes, and completed orders.

How to make a request. Email gallery@posteritati.com. We may need to verify your identity before acting. We will not charge you unless a request is manifestly unfounded or excessive.

CALIFORNIA PRIVACY RIGHTS

If you are a California resident, the CCPA (as amended by the CPRA) gives you the right to know what personal information we collect, use, disclose, and sell or share; to request access, deletion, and correction; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

• Categories collected in the last 12 months: identifiers (name, email, phone, address, IP address, username, device and push tokens); commercial information (orders, wants, collection, likes); internet or similar activity; audio, electronic, or visual information (photos you upload); geolocation limited to general location inferred from IP address or profile location you provide; and, for sellers, information about payout accounts (held by Stripe). Account log-in credentials and payment card details processed by Stripe and PayPal are "sensitive personal information" and are used only to provide the Services.
• Sources: you, your devices, our service providers, and shipping carriers.
• Purposes and disclosures: as described in the sections above, to the categories of service providers and partners listed above.
• Sale and sharing: we do not sell personal information for money. Where you opt in to analytics and advertising cookies, Google and Meta tags may be considered "sharing" for cross-context behavioral advertising under California law. You can opt out by declining those cookies. We do not knowingly sell or share the personal information of anyone under 16.
• To exercise your rights, email gallery@posteritati.com. You may use an authorized agent; we may require proof of authorization and verification of your identity.

Residents of other U.S. states with comprehensive privacy laws may have similar rights; contact us to exercise them.

DO NOT TRACK

Because there is not yet a common standard for responding to browser "Do Not Track" signals, we do not alter our data collection and use practices when we see one. We do treat analytics and marketing cookies as opt-in.

CHILDREN

The Services are not directed to children. You must be at least 16 years old to create an account or use the App, and at least 18 to sell on our marketplace. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

SECURITY

We use measures such as encryption in transit (HTTPS), encryption of certain sensitive fields at rest, hashed passwords, access controls, and per-device access tokens that can be revoked. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information we will notify you and the relevant authorities as required by law.

CHANGES

We may update this Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. The "Last updated" date above shows when it last changed. If we make a material change we will notify you by email, in the App, or on the Site before it takes effect where required.

CONTACT US

For questions about our privacy practices, to exercise your rights, or to make a complaint, contact us by email at gallery@posteritati.com or by mail:

Posteritati 239 Centre St, FL 4 New York, NY 10013, United States