Privacy policy

1. Who we are

TeslaSkins is run by Nimzo Holdings Ltd, a company registered in England and Wales (company number 17453506), with its registered office at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE. We are the controller of your personal information under UK data protection law. For any privacy question, email info@teslaskins.io.

2. What we collect

When you create an account

Your name, email address and password. Your password is stored by our login provider in scrambled (hashed) form, so we can never see it.

When you buy a wrap or credits

Which wraps or credit packs you bought, the model, the price, the date and whether the payment succeeded or was refunded. Stripe collects your card details and billing address directly; we receive a payment reference, confirmation and your billing country, never your full card number. When you start a payment we also note the country you are paying from, worked out from your IP address, to charge the right tax and to check we can sell to you.

When you download a free wrap

Your email address, which free wrap you asked for, the country you asked from (worked out from your IP address), when you verified your email and when you downloaded the wrap. We use it to send you the download link, to check whether you have had your one free wrap, to let you download wraps again, and to understand how free wraps are used. If you tick the box, we also record that you agreed to receive emails about new wraps and offers.

Your credits

Each credit pack you buy, each credit you use and the wrap it unlocked, and any credits removed after a refund. We use this to show your balance and to let you download the wraps you have unlocked again.

When you use the site

• Wraps you save or collect, so they appear in your account.
• Designs you make in the editor, including any images you upload to them. We keep a copy of work in progress, even if you don’t save it, together with the time, your approximate location and your device type, and your email address if you are logged in. See Your designs and uploads below.
• Anonymous visit statistics, and information collected by Meta’s and Reddit’s advertising pixels, all explained in the next section.
• Basic technical logs kept by our hosting provider, such as IP address, browser and the page requested, used to keep the site secure and working.

Your designs and uploads

Anything you add to the editor, including photos, logos and other images you upload, is sent to our servers as you work, whether or not you save it. Our team can view these designs and uploads. We look at them to:

• understand how people use the editor and improve it;
• help you if you contact us about a design;
• check for designs or uploads that break our terms or the law.

We don’t publish, sell or share your designs or uploads, except with the providers that store them for us or where the law requires it. Please don’t upload pictures of other people, number plates or anything else that identifies someone without their permission, and don’t upload anything you want to keep private.

When you contact us

Your email address and whatever you tell us, so we can reply.

3. How we measure visits and ads

Our own visit statistics

We run our own simple statistics instead of tools like Google Analytics. They help us see which wraps are popular and whether checkout works. They use no cookies and are not used for advertising.

When you view a page, open a wrap, pick a model, search, start checkout or complete a purchase, we record:

• what happened, the page, and the wrap, model or search involved;
• your approximate location (country, region and city), worked out from your IP address by our hosting provider;
• your device type, browser, operating system, language and screen size;
• the website or campaign that sent you to us, if any.

We don’t store your IP address. To count unique visitors, we turn your IP address and browser details into a one-way code that changes every day, so we can’t recognise you from one day to the next or link visits to your account.

Meta Pixel

We advertise on Facebook and Instagram, and, only if you press Accept on our cookie banner, we use the Meta Pixel to see whether those ads work. The pixel is a small piece of code from Meta Platforms Ireland Ltd. If you reject it or don’t choose, it doesn’t load and nothing is sent to Meta. When it runs, it sends Meta:

• the pages you view on TeslaSkins;
• when you start checkout, and when you buy a wrap, with the price and the wrap’s ID;
• your IP address and browser details, and cookie identifiers.

The pixel sets a cookie called _fbp, which lasts up to 90 days, and Meta can read its own cookies if you use Facebook or Instagram in the same browser. Meta can use this information to match your visit to your Facebook or Instagram account, measure our ads, show you our ads, and for its own purposes as set out in Meta’s privacy policy. We don’t send Meta your name, email address or designs.

You can change your mind at any time with Cookie settings, which is also at the bottom of every page. You can also change your Meta ad preferences.

Reddit Pixel

We also advertise on Reddit, and, only if you press Accept, we use the Reddit Pixel, a small piece of code from Reddit, Inc., to see whether those ads work. If you reject it or don’t choose, it doesn’t load and nothing is sent to Reddit. When it runs, it sends Reddit the pages you view, when you start checkout, and when you buy a wrap with the price, along with your IP address, browser details and cookie identifiers. It sets a cookie called _rdt_uuid, which lasts up to 90 days. Reddit can use this to measure and show our ads, as set out in Reddit’s privacy policy. We don’t send Reddit your name, email address or designs.

4. Why we use it

5. Who we share it with

We never sell your personal information. We share it only with the companies that help us run TeslaSkins, under contracts that protect it:

• Stripe processes card payments. Stripe also acts as a controller of payment information for fraud prevention and its legal duties; see Stripe’s privacy policy.
• Supabase hosts our database, login and file storage.
• Vercel hosts the website and provides approximate location from IP addresses.
• Meta receives the information described in Meta Pixel. For collecting and sending it, Meta and we are joint controllers; what Meta does with it afterwards is covered by Meta’s privacy policy.
• Reddit receives the information described in Reddit Pixel.

We may also share information if the law requires it, to protect our rights or prevent fraud, or with a buyer if the business is ever sold.

6. Outside the UK

Some of our providers process information in the United States or the European Economic Area. Where information leaves the UK, it is protected by the safeguards UK law requires, such as the UK International Data Transfer Addendum, standard contractual clauses or the UK Extension to the EU–US Data Privacy Framework.

7. How long we keep it

• Account details, saved wraps and designs: while your account is open. We delete them within 30 days of you asking us to close it.
• Unsaved editor work in progress: 90 days.
• Order and payment records: 6 years after the purchase, as UK tax law requires. For buyers outside the UK, the country records we need for VAT and sales tax (your billing country and the country you paid from) are kept for 10 years, as EU VAT rules require.
• Free wrap downloads, credits and unlocked wraps: while your account is open, because they are how we know which wraps you can download again and how many credits you have. If you downloaded a free wrap without an account, up to 2 years after your last download. You can ask us to delete them sooner, but you’ll then lose your unused credits and access to those wraps. Credit pack purchases are order and payment records, kept as described above.
• Visit statistics: up to 25 months, then deleted.
• Meta Pixel: the _fbp cookie lasts up to 90 days. Meta keeps the information it receives under its own policy.
• Reddit Pixel: the _rdt_uuid cookie lasts up to 90 days. Reddit keeps the information it receives under its own policy.
• Support emails: up to 2 years after we last hear from you.

8. Cookies and storage

Our own visit statistics don’t use cookies. The only optional cookies are the Meta Pixel’s _fbp and the Reddit Pixel’s _rdt_uuid advertising cookies, and they are only set if you press Accept on our cookie banner. Change your cookie settings.

Everything else we store in your browser’s local storage is needed for the site to work, so it doesn’t need your consent:

• keeping you logged in;
• remembering your saved wraps, chosen model and editor drafts on your device;
• remembering your cookie choice.

When you pay, you move to Stripe’s secure checkout page, where Stripe uses its own cookies to process the payment and prevent fraud.

9. Keeping it safe

All connections to TeslaSkins are encrypted. Access to our database is restricted. Personal data such as visit statistics can only be read by our servers, and editor designs and uploads can only be viewed by our team. No system is perfectly secure, but if a breach ever affected you, we would tell you and the regulator as the law requires.

10. Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong;
• delete your information, or close your account;
• limit how we use it, or stop using it for our legitimate interests;
• send your information to you or another company in a usable format.

Email info@teslaskins.io from the address on your account. It’s free, and we’ll respond within one month. Some information, such as order records, we must keep for legal reasons even if you ask us to delete it.

If you’re unhappy with how we handle your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

11. Children

TeslaSkins is not meant for children under 13, and we don’t knowingly collect their information. If you think a child under 13 has created an account, contact us and we will delete it.

12. Changes and contact

We’ll update this policy if the way we use information changes, and show the date at the top. If a change is important, we’ll tell you on the site or by email.

Questions? Email info@teslaskins.io or write to Nimzo Holdings Ltd, Suite A, 82 James Carter Road, Mildenhall, IP28 7DE. Our terms of service explain the rules for using the site and buying wraps.