Privacy

Your photos, in plain words

Last updated 13 October 2026. Firefly Jar is run by Colabo Labs LLC, Wyoming, USA.

What we collect

• Your child's first name, the pronoun you choose, and one to three photos of your child's face.
• The names and photos of two to four toys, and any note you add about them.
• Your dedication text and how you sign it.
• Your email address, so we can send the book.
• Whether the book is for your own child or a gift, and your confirmation of the parent's permission.
• Payment details go to Stripe. We never see your card number.

Why

To paint and deliver one book. Nothing else. We do not sell, share, or advertise with any of it.

Where it goes

• Storage: photos and your order are stored in a private bucket on Vercel while the book is being made.
• Painting:the photos are sent to one AI model only, Google Gemini through OpenRouter, on a paid plan with a zero-data-retention agreement. They are never used for training. Your child's name is never put in any prompt. We strip location data from the photos before they leave our server. Google keeps an automated abuse-screening log for up to about 55 days; it is not training data.
• Payment: Stripe handles the payment and keeps the receipt.
• Email: Resend delivers the message with your book.

How long we keep it

We delete the photos from our storage 30 days after your book is delivered, or earlier if you email us. The finished files stay at a private link for 30 days so you can download them again. Your email and the order record stay with the payment receipt as the law requires. If you start an order and do not pay, we keep the photos for 7 days from the day that unfinished checkout runs out, so you can come back and finish it, and then we delete them.

Visits to this site

We use Google Analytics and the Meta Pixel, through Google Tag Manager, to count visits and to learn which of our ads bring people here. They set cookies and record the pages you open here, the link or ad that brought you, your browser and device, and two steps of an order: when you go to payment, and when the payment goes through, with the amount and an order number. Google and Meta may connect this to your own Google or Meta account under their privacy policies, and Meta uses it to measure our ads and to show them to people who may want the book.

They never get your photos, your child's name, your dedication, your email address or your order page. Nothing from them runs on your order page.

They stay off if your browser sends Global Privacy Control. You can also switch them off for this browser here:

Children

You are uploading a child's face. If the child is not yours, the order form asks you to confirm that their parent or guardian knows and has agreed, including to the AI part. Please do not upload photos of a child without that permission.

Your rights

Ask us for a copy of what we hold, or ask us to delete it, at any time: fireflyjarbooks@gmail.com. We answer within a few days.