Privacy

FAMELESS is an Australian project making numbered collectible cards. This page covers the website, the card creation flow and the orders placed through it.

FAMELESS is operated by Thomas Oliver, ABN 42 374 404 596, of 24 The Esplanade, Narrabeen NSW 2101, Australia.

For anything on this page — a question, a correction, a copy of what we hold, or a deletion request — email privacy@fameless.au.

Making a free preview never sends us your photograph. When you choose a photo it is resized and re-encoded in your own browser, and the card you watch build is drawn locally from that copy. The preview request we receive carries a name, your answers and a tone — no image.

Re-encoding on your device also discards the file's embedded metadata, including camera information and GPS coordinates. What would be uploaded later is a plain JPEG without them.

Your photograph is uploaded only when you go through to checkout. If you build a card and walk away, the image never leaves your phone.

Every uploaded image is given a deletion date the moment it arrives, so the default outcome of us doing nothing is that it goes away. The date only moves outward when something real happens:

• 24 hours — uploaded, then checkout abandoned.
• 7 days — a card exists but the order was never paid.
• 30 days after delivery — your original photograph and any generated image we did not use. This is the one that applies to a normal order.
• 120 days from payment — a ceiling, if a card is paid for but never dispatched.

How we work out “delivery”. If you collect your card from a venue, that collection is the delivery. For a posted card nobody tells us when it arrived, so we treat delivery as 21 days after we post it and start the 30 days from there. We would rather assume a slow delivery and keep your photograph a little longer than assume a fast one and delete it before the date you were given.

The finished artwork is kept. Your original photograph goes on the timetable above; the final approved card artwork is kept while your entry in the Register is active, so a replacement can be printed without asking you for the photo again. When an entry is taken down — or you withdraw consent for it to be shown — that artwork rejoins the deletion schedule.

A deletion date can be paused only for a specific reason we can point at, such as an unresolved payment dispute. A paused file is reviewed by a person; it is never left paused by default.

What deletion means here. We delete the file from our storage. We do not control, and cannot verify, whether our hosting provider keeps internal copies of it afterwards or for how long — so we do not make a claim about that either way. Separately, limited records such as the order itself are kept where tax and consumer law require it.

Uploads are stored with Vercel Blob, our hosting provider's file storage, in Australia where the provider offers it.

Uploads are currently stored with public access. Anyone who has the exact URL can open the file, including a photograph of a child. The address contains a long random suffix, so it cannot be guessed from a name — but an unguessable address is not the same as a private one, and we are not going to describe it as though it were. Anyone the URL is shared with, deliberately or not, can open it.

Moving to private storage with signed, expiring links is a change we have committed to make before Series 001 goes on sale. Until it is done, this is the most significant gap on this page and it is stated here rather than buried.

To place an order we ask for and record:

• Your email address.
• Your name, if you give one.
• A delivery address, when the order is being posted rather than collected from a venue.
• The card itself: the name printed on it, your answers, the archetype and line they produced, and the number allocated to it.
• Which consents you gave, the wording you were shown and when — including confirmation that you have the right to use the photograph, and a guardian's confirmation where the card is of a child.

Marketing consent is off by default and never affects whether an order goes through.

Payment is taken by Stripe on Stripe's own hosted checkout page. Card numbers are entered there, not here — we never see or store them. We keep the order reference Stripe gives us so a payment can be matched to a card.

Two first-party cookies are set: one identifies your visit so a set of actions can be joined up, and one records which QR code or sign you arrived from. Both are httpOnly — script on the page cannot read them — and neither is used for advertising.

Events such as “a preview was requested” are recorded in our own database. There is no third-party analytics service, no advertising pixel and no session-replay tool on this site.

Some of the writing on a card — the archetype and the one line under your name — is produced with help from a language model, reached through Vercel's AI Gateway. It is sent the card's text: the name, the answers you chose and the tone. Your photograph is not sent to it.

A separate model can look at an uploaded photograph to flag print problems — too dark, too small, too heavily filtered. Today that runs only when a person on our side opens a card in the admin tool during order review. It never runs on the free preview, because at that point no photograph has been uploaded.

If that ever changes — if a photograph were to be checked automatically rather than by a person — we would update this page before it did, not after.

Every printed card carries a QR code that resolves to a page for that card. Cards are marked either listed or unlisted, and a card can be archived, after which its code goes to the home page instead of a profile.

The Register at fameless.au/register shows the state of every number in the series. It shows a name or a portrait only where the cardholder has separately consented to public display — buying a card is not that consent, and nor is giving us the right to print the photo. Without it the entry reads REGISTERED and carries no identity at all. Being listed in the Register and being indexable by search engines are two more separate decisions.

Withdrawing public display. Tell us and the entry stops showing your name and portrait immediately — the page is built from your consent each time it is requested, so there is no cache of ours to wait for. Two honest limits: pages already saved or screenshotted by other people are beyond our reach, and a link preview image already fetched by a third party such as a social network may persist in that service's cache until it refetches.

A card can also be archived entirely, after which its QR code goes to the home page instead of a profile.

We never use your photograph or your finished card in our own advertising, social media or other marketing without your separate, explicit consent. It is its own tickbox at checkout, it is never preselected, and refusing it changes nothing about your order. Where the card is of a child, that consent must come from their parent or guardian.

You can withdraw it at any time by emailing privacy@fameless.au. That stops any future use. It cannot recall something already printed or already posted, which we say plainly rather than implying otherwise.

Emails about new series are a different decision again, with its own tickbox. Neither is a condition of buying anything. Sharing your own card wherever you like is, of course, entirely yours to do — and encouraged.

Cards of children are an intended part of this product. An order for one requires a guardian to confirm, at checkout, that they are the parent or guardian and consent to the photograph being used — that confirmation, its wording and its timestamp are recorded with the order.

You can ask what we hold about you, ask us to correct it, ask us to delete it, or withdraw a consent you gave. Write to privacy@fameless.au.

Two things a deletion request cannot undo, said plainly: a card that has already been printed and posted is a physical object in your hands and not ours to recall, and the order record behind it is kept where tax and consumer law require it. Everything else — the photograph, the artwork, the public entry — we can and will remove.

We aim to answer within 30 days. We will ask you to confirm the email address the order was placed from before we act on a request about it, because acting on an unverified request is its own privacy failure.

This policy is governed by the law of New South Wales, Australia.

This is a provisional document written from how the site currently behaves. It will be replaced by a reviewed policy before Series 001 goes on sale, and the effective date at the top will change with it. See also our Terms.