Privacy

Last updated 17 October 2026

This page explains what personal data POCKET11 uses, why, and the rights you have under the General Data Protection Regulation (GDPR).

Who is responsible

POCKET11 is responsible for your data. For anything about your data, email support@pocket11.store.

What we use, and why

  • Your design (pattern, colours, symbol, name, number and box), to make your shirt.
  • What you type in "Describe your shirt", sent with your current design to Anthropic, whose AI turns it into a design. We don't keep it; Anthropic deletes it within 30 days, unless it needs to keep it longer to enforce its usage policy or by law. Please don't write personal details there.
  • At checkout: your email, name, delivery address and phone number, to confirm the order, make it and deliver it (couriers ask for a phone number). Stripe takes the payment; we never see your card details.
  • Which of our links or ads brought you here, if you came by one (the labels we put on our own links), kept with your order to know which ads work. No cookies are used for this.

We use this data to perform our contract with you (Article 6(1)(b) GDPR), to meet our legal obligations, such as keeping sales records for tax (Article 6(1)(c)), and for our legitimate interest in keeping the site secure and preventing fraud (Article 6(1)(f)). We don't sell your data, don't use it for advertising, and don't make automated decisions about you with legal or similar effects.

Who receives it

  • Stripe: payments. Stripe also uses payment data as a controller in its own right, for example to prevent fraud (see Stripe's privacy policy).
  • Supabase: our order database, on servers in London (United Kingdom).
  • Resend: sends the order emails.
  • Anthropic: turns your description into a design.
  • Sendcloud and the courier: your name, address, phone number and email, to deliver the parcel.
  • Our production partner: your design, including the name and number, and the order number.
  • Vercel: hosts the site (servers in London).
  • The tax authorities, as the law requires.

Some of these providers process data outside the European Economic Area. The United Kingdom has an adequacy decision from the European Commission. Transfers to the United States are protected by the EU–US Data Privacy Framework, where the provider is certified, or by the European Commission's standard contractual clauses.

How long we keep it

  • Orders never paid (the design only): deleted after 30 days.
  • Your email, phone number and address: kept until the legal guarantee is over (three years after delivery, plus three months for a late claim), then deleted.
  • The record of the sale (order number, date, design, price and country): kept for 10 years, as Portuguese tax law requires, then deleted.
  • Your description for the design AI: not kept by us (see above).

Cookies and storage

The shop uses no cookies for tracking or advertising, and no analytics. When you press Checkout, your browser saves your design in its session storage, so it's still there if you come back from the payment page. It's removed when you reach the confirmation page of the paid order, or when you close the tab. Stripe's payment page uses its own cookies.

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Email support@pocket11.store; we'll answer within one month. Some data, such as the record of a sale, we must keep by law.

You can also complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt), or to the authority where you live.

Changes

If we change this page, we'll update the date at the top.