隱私權政策

最後更新：2026 年 8 月　·　Tela Aurea Lab

Tela Aurea Lab（以下簡稱「本站」）重視您的隱私。本政策說明我們如何收集、使用及保護您的個人資料，適用於 telaaurealab.com 上的所有服務。

一、資料控管者

Tela Aurea Lab
Email：hello@telaaurealab.com

二、我們收集哪些資料

2-1 購買資料（透過金流平台）

您購買 SVG 時，金流平台（綠界 ECPay / Lemon Squeezy / Polar）會代為收集並處理以下資料。本站不儲存您的信用卡號或完整付款資訊。

2-2 分析資料（Google Analytics 4）

本站使用 Google Analytics 4（GA4）了解流量來源與使用行為。GA4 收集的資料為匿名統計，不會識別個人身份。

• IP 位址（由 Google 匿名化處理）
• 瀏覽器類型、裝置資訊、作業系統
• 瀏覽頁面、停留時間、點擊事件
• 來源網站（referrer）

2-3 本地儲存（localStorage）

本站在您的瀏覽器本地儲存以下偏好設定，不傳送至伺服器：

• dc_lang：語言偏好（中文 / 中英 / 英文）
• dc_currency：幣別偏好（TWD / USD）
• 設計參數（圖案類型、顏色等，用於還原上次設計）
• dc_tour_seen、dc_announce_seen_v1：是否已看過網站導覽與功能公告

第 2-8 節的「改善用途」選擇不存在瀏覽器，而是綁在您的帳號上，因此換裝置或清除瀏覽器資料都不會遺失，也能從任何裝置撤回。

2-4 聯絡 Email

當您主動寄信至 hello@telaaurealab.com，您的 email 地址及信件內容將用於回覆您的問題，不作其他用途。

2-5 藝術家市集候補名單（Waitlist）

若您主動填寫「藝術家市集候補名單」表單，我們會收集您提供的署名 / 品牌名、國家或地區、作品社群連結、聯絡 Email，以及（選填）是否為北美原住民族等資料。這些資料僅用於建立創作者候補名單、評估與通知市集合作機會，以及文化溯源相關規劃。未經您明確同意，我們不會將您的聯絡方式或作品集公開於網站；族裔資訊為選填，且不會作為任何審查或排除之依據。您可隨時來信要求查詢、更正或刪除這些資料。

2-6 帳號資料

建立帳號時，我們僅收集您的 email 地址、登入方式（Google 或 email 登入連結）與建立時間。我們不收集您的姓名、大頭貼、生日或通訊錄。使用 Google 登入時，我們向 Google 索取的授權範圍僅有 openid email，因此 Google 不會提供其他個人資料給我們。

登入後，您的瀏覽器會存放一個名為 sid 的識別字串（隨機產生，不含您的任何個人資料），有效期 30 天。該 cookie 設有 HttpOnly，網頁程式無法讀取。登出即刪除。

這些資料存放於 Cloudflare 的資料庫服務（D1 與 KV），詳見第三節。

2-7 您儲存的設計

當您按下「儲存設計」，我們儲存的是約 34 個數值參數（圖案類型、節點數、層數、比例、顏色碼、尺寸等），以及您輸入的設計名稱與（選填）系列名稱。

我們不儲存任何圖檔。您的設計圖是在您需要時，由這些參數即時重新繪製而成。這代表我們的伺服器上沒有您的作品影像，只有一串描述它的數字。

您可在「我的設計」中隨時刪除任一設計，刪除即從資料庫移除。

2-8 改善用途的選擇性同意（訓練資料）

儲存設計時，我們會詢問一次：是否願意讓您的設計協助改善本工具。這是明示同意、預設為不同意——您不作任何動作即代表不同意，功能完全不受影響。

若您選擇同意，可能被使用的範圍僅限第 2-7 節所述的參數數值。不包含您的 email、帳號、設計名稱或任何可識別您的資訊。

目前狀態：我們尚未將任何資料用於訓練或分析。此同意欄位目前只是被記錄下來。若未來實際開始使用，我們會更新本政策並標示變更日期。

如何撤回：登入後點右上角頭貼 → 資料與同意，隨時可開啟或關閉，立即生效。關閉時會一併把您所有已儲存設計的此項設定改為不同意，不會留下「帳號說不、設計說是」的狀態。刪除該筆設計亦會一併移除同意紀錄。若不便操作，也可來信 hello@telaaurealab.com。

我們同時記錄您作出選擇的時間，作為同意紀錄之憑據。撤回不影響您已取得的任何服務。

2-9 印製服務通知名單

若您在「印製」功能中留下 email，我們僅將其用於印製服務上線時通知您一次。不會用於其他行銷、不會轉售、不會提供給第三方。您可隨時來信要求移除。

三、第三方服務

四、您的權利

依台灣《個人資料保護法》及適用法規，您有以下權利：

• 查詢 / 閱覽：查詢本站持有的您的個人資料。
• 更正：要求更正不正確的資料。
• 刪除：要求刪除不再必要的資料（法律要求保留者除外）。
• 限制處理：要求暫停使用您的資料。
• 拒絕行銷：本站不發送行銷 email。唯一的例外是您主動登記的「印製服務通知名單」（第 2-9 節），該名單只會在服務上線時通知一次，可隨時來信要求移除。登入連結等交易信件為您主動觸發，不屬行銷。
• 撤回同意：第 2-8 節的改善用途同意可隨時撤回，撤回不影響已提供的服務，也不影響撤回前依該同意所為之處理的合法性。

歐盟使用者另享有 GDPR 所賦予之資料可攜性及向監管機關申訴之權利。

五、資料保留期限

六、政策更新

本政策如有重大變更，將在本頁更新日期並於合理期間前通知。繼續使用本站視為接受更新後的政策。

Privacy Policy

Last updated: August 2026　·　Tela Aurea Lab

Tela Aurea Lab ("we", "our", "the site") respects your privacy. This policy explains how we collect, use, and protect your personal data when you use telaaurealab.com.

1. Data Controller

Tela Aurea Lab
Email: hello@telaaurealab.com

2. Data We Collect

2-1 Purchase Data (via Payment Processors)

When you purchase an SVG, our payment processors (ECPay / Lemon Squeezy / Polar) collect and process the following. We do not store your full card number or sensitive payment credentials.

2-2 Analytics Data (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand traffic and usage patterns. GA4 data is anonymised and cannot identify you individually.

• IP address (anonymised by Google)
• Browser type, device information, operating system
• Pages visited, time on site, click events
• Referrer (the site that linked you here)

2-3 Local Storage

We store the following preferences in your browser's localStorage. This data never leaves your device:

• dc_lang: Language preference (Chinese / bilingual / English)
• dc_currency: Currency preference (TWD / USD)
• Design parameters (pattern type, colours, etc.) to restore your last session
• dc_tour_seen, dc_announce_seen_v1: whether you have seen the site tour and the feature announcement

Your answer to the improvement-use question in section 2-8 is not kept in the browser. It is attached to your account, so it survives switching devices or clearing browser data, and can be withdrawn from anywhere.

2-4 Support Email

If you contact us at hello@telaaurealab.com, your email address and message content will be used solely to respond to your enquiry.

2-5 Artist Marketplace Waitlist

If you choose to fill in our "Artist Marketplace Waitlist" form, we collect the data you provide: your display / brand name, country or region, portfolio or social links, contact email, and (optionally) whether you are of Native American / Indigenous heritage. This data is used only to build the creator waitlist, to evaluate and notify you of marketplace collaboration opportunities, and for cultural-attribution planning. We will not publish your contact details or portfolio on the site without your explicit consent; the heritage question is optional and is never used as a basis for screening or exclusion. You may email us at any time to access, correct, or delete this data.

2-6 Account Data

When you create an account we collect only your email address, sign-in method (Google or emailed sign-in link), and the date you signed up. We do not collect your name, profile photo, date of birth, or contacts. When you sign in with Google we request only the openid email scope, so Google does not hand us anything else.

While signed in, your browser holds a cookie named sid — a random string containing none of your personal data — valid for 30 days. It is marked HttpOnly, so page scripts cannot read it. Signing out deletes it.

This data lives in Cloudflare's database services (D1 and KV); see section 3.

2-7 Designs You Save

When you press "Save", what we store is about 34 numeric parameters (pattern type, node count, layer count, ratio, colour codes, size, and so on), plus the design name you type and an optional collection name.

We store no image files. Your design is redrawn from those parameters whenever you need it. That means our servers hold no picture of your work — only a short list of numbers describing it.

You can delete any design from "My Designs" at any time; deletion removes it from the database.

2-8 Optional Consent for Improvement (Training Data)

When you save a design we ask once whether you are willing to let it help improve this tool. This is explicit opt-in and defaults to no — doing nothing means no, and nothing about the feature changes either way.

If you do consent, what may be used is limited to the numeric parameters described in section 2-7. It does not include your email, your account, the design name, or anything that identifies you.

Current status: we have not used any data for training or analysis yet. The consent field is simply being recorded. If we ever begin, we will update this policy and date the change.

How to withdraw: while signed in, open the avatar menu in the top right and choose Data & Consent. You can switch it on or off at any time and it takes effect immediately. Turning it off also sets every design you have saved back to "no", so you are never left with an account that says no while the designs say yes. Deleting a design also removes its consent record. If that is inconvenient, email hello@telaaurealab.com instead.

We also record when you made the choice, as evidence of consent. Withdrawing affects no service you already have.

2-9 Printing Notification List

If you leave your email under the "Print" feature, we use it only to notify you once when the printing service launches. Not for other marketing, never sold, never shared with third parties. Email us any time to be removed.

3. Third-Party Services

4. Your Rights

Under Taiwan's Personal Data Protection Act (PDPA) and applicable law, you have the right to:

• Access: Request a copy of personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of data no longer necessary (subject to legal retention requirements).
• Restriction: Request that we pause processing your data.
• Opt out of marketing: We do not send marketing emails. The one exception is the printing notification list you sign up for yourself (section 2-9), which contacts you once at launch and which you can leave by emailing us. Transactional mail such as sign-in links is triggered by you and is not marketing.
• Withdraw consent: The improvement-use consent in section 2-8 can be withdrawn at any time. Withdrawing affects no service you already have, and does not affect the lawfulness of processing carried out before you withdrew.

EU residents additionally have the right to data portability and the right to lodge a complaint with your national supervisory authority under GDPR.

5. Data Retention

6. Policy Updates

If we make material changes to this policy, we will update the date above and provide reasonable notice. Continued use of the site constitutes acceptance of the revised policy.