Legal Document

TOMATRONIC Privacy Policy

Last Updated: May 2026

This policy applies to tomatronic.com and its subdomains (including orders.tomatronic.com, life.tomatronic.com, hereinafter collectively referred to as "this website"), operated by TOMATRONIC Studio (hereinafter referred to as "we"). This policy explains how we collect, use, store, and protect your information.

I. What Information We Collect

1.1 Custom Order Submission (orders.tomatronic.com)

When submitting a custom order, we collect the following information:

InformationRequiredPurpose
Language preference (Chinese/English)Auto-detectedInterface language display
Custom specifications (product type, paper, ink, framing options, size, etc.)Depends on product lineTo evaluate and fulfill your request

Contact Information: Custom order submission does not require you to provide any contact information. You may choose to fill in your contact details in the form for our convenience in reaching you, or leave it blank — the system will generate a reference number upon submission, and you may proactively contact us with that number.

Regarding Images You Upload:

  • Images you upload are used solely for prepress preparation and print production. The system automatically strips embedded EXIF metadata (such as GPS location, camera device, timestamps, etc.) upon upload, and we do not retain this information. After an order is completed, image files are retained for 1 week and then automatically deleted from our servers.
  • Please do not upload files containing personal privacy or sensitive information. If your source files contain content unsuitable for network transmission, please submit your request first, then contact us to arrange offline delivery of original files.
  • This website supports JPEG, PNG, WebP, HEIC, HEIF, and TIFF formats. If you need to submit files in other formats, please place your order first, then contact us to arrange file delivery.

We do not require you to provide: National ID numbers, home addresses, bank card information, or other personal information unrelated to printing services. Specification confirmation, price negotiation, and payment for actual transactions are all completed through offline communication.

1.2 Contact Form (orders.tomatronic.com/contact)

When submitting an inquiry through the contact form, we collect your name, contact method (choose one of WeChat/phone/email), and your message content, solely for the purpose of responding to your inquiry. In B2B mode, company name is also collected.

1.3 Main Site (tomatronic.com)

The main site consists of display and content pages. It contains no forms and collects no user data. All consultation entry points direct to orders.tomatronic.com.

1.4 Print Archive (life.tomatronic.com)

The Print Archive is a user-maintained exhibition space. The titles, descriptions, nicknames, images, audio, and video links you upload to your management page are under your full control. The system automatically strips embedded EXIF metadata from images upon upload. You may at any time:

  • Set your prints to public (visible to all) or hidden (visible only to you)
  • Edit or delete any content
  • Permanently delete an entire print and its associated files

Special Reminder: Content in this area is maintained by you. Please do not upload images or files containing personal identity information, portraits of others, home addresses, or other private content. Hidden prints can be viewed on the management page with the reason and cumulative count, and can be re-published after modification.

1.5 Automatically Collected Information

InformationPurposeRetention Period
IP addressSecurity protection (rate limiting, abuse prevention)Temporarily logged, rolling purge
Cloudflare Turnstile verification tokenAutomated bot preventionDiscarded immediately after verification

We do not use any analytics or tracking services (such as Google Analytics, Baidu Analytics, etc.), deploy no advertising tracking pixels, and do not record your browsing behavior.

II. How Information Is Stored

All data is stored on Cloudflare's global infrastructure (D1 database, R2 object storage), with servers distributed across Cloudflare's global network. All data transmission uses TLS encryption. Cloudflare provides enterprise-grade security capabilities including DDoS protection and Web Application Firewall (WAF).

III. How Long Information Is Retained

Data TypeRetention PeriodNotes
Images uploaded for custom ordersRetained 1 week after order completion, then automatically deletedUsed only for prepress and printing
Order records (including contact info)Long-term retentionContact info visible only in backend, used for after-sales traceability
Contact form recordsRetained as neededUsed for customer communication records
Print Archive contentUnder your controlPublic/hidden/deletion are all managed by you on the management page
IP rate limiting recordsRolling purgeUsed only for real-time security protection

You may request that we delete your order records or contact form records at any time through the contact information below.

IV. Relationship with Third Parties

We do not sell, rent, or share your personal information with any third party for marketing purposes.

The following are infrastructure service providers supporting the operation of this website:

ServicePurposeData Received
Cloudflare TurnstileHuman verificationBrowser behavior signals (non-personal information)
Cloudflare D1 / R2 / KVData storage and computationAll business data described above

The above services are provided by Cloudflare, Inc. and are governed by Cloudflare's Data Processing Addendum. Beyond the above services, this website loads no external fonts, scripts, or resources.

V. Your Rights

Under the Personal Information Protection Law of the People's Republic of China, you have the following rights regarding your personal information:

  • Right of Access: Request that we inform you whether we hold your personal information and its content
  • Right of Rectification: Request correction when you discover inaccurate information
  • Right of Erasure: Request deletion of your personal information
  • Right to Withdraw Consent: Withdraw previously given consent for information processing

To exercise the above rights, or if you have any questions about this policy, please contact us at:

Email: 3300306559@qq.com
WeChat: TOMATRONICmain
We will respond to your request within 15 business days.

Content on the Print Archive (life.tomatronic.com) is managed by you independently. You may complete editing, hiding, or deletion directly on the management page without contacting us.

VI. Protection of Minors

This website does not implement age verification mechanisms and does not provide services directed at children under 14 years of age. We do not actively collect personal information of minors. If you discover that a minor has provided us with personal information without guardian consent, please contact us for deletion.

VII. Updates to This Policy

We may update this policy from time to time. In the event of material changes, we will notify you prominently on the website homepage or order pages.

VIII. Governing Law

The formation, interpretation, and dispute resolution of this policy shall be governed by the laws of the People's Republic of China.