Privacy policy

Effective October 30, 2026 · Tata's Faces Corp ("we", "us")

What we collect

Usage data. When you visit tata1000faces.com we collect standard analytics: pages viewed, approximate location (country/region, derived from IP), device and browser type, referring page, and interaction events such as which Tata you opened. We use Google Analytics 4 and PostHog for this, and Sentry to capture error reports (which may include your browser type and the page where an error occurred). IP addresses are truncated or anonymised where the provider supports it.

Order data. Purchases are processed by Shopify and Etsy, with Printful producing our printed items. Those platforms collect your name, shipping address, email and payment details under their own privacy policies; we receive what is needed to make and ship your order. We never see your full card number.

Email updates. If you sign up for updates, we store your email address and the date you signed up, in our database (hosted on Supabase), until you unsubscribe or ask us to remove it.

Messages. If you write to us, we keep the message and our reply.

Cookies

We use first-party cookies and similar storage for analytics and to remember your settings (such as whether you have seen the opening sequence). We do not run advertising networks and we do not sell your data.

Why we use it

To run the site, fulfil orders, fix bugs, understand which parts of the site people use, and send updates you asked for. Our legal basis under GDPR is performance of a contract (orders), consent (email updates, analytics where consent is required), and legitimate interest (security, error reporting).

Who we share it with

Only service providers that we need to operate: Vercel (hosting), Supabase (database), Google Analytics, PostHog, Sentry, Shopify, Etsy, Printful, our email provider (Google Workspace), and Telegram, which delivers our internal order notifications to our own team. When we publish to or stream on our own social accounts, the platform involved (Meta for Instagram, Facebook and Threads; TikTok; Google for YouTube; Twitch; Pinterest; X) processes that activity under its own terms. Each acts under its own terms and only for the purpose we engaged it for. We share data with authorities only if legally required.

Social accounts

We publish to our own Instagram, Facebook, Threads, TikTok, Pinterest, X and YouTube accounts using each platform's official tools and APIs, authorised only for our own accounts. Interacting with us on those platforms is also governed by that platform's own privacy policy.

Live streams. During our live streams on Twitch and YouTube, the public display name and message of viewers who chat, or who send Bits, Super Chats or other support, may be read by our systems so the stream can react to them — for example, a building appearing in Tata World carrying your display name. Names and messages pass through an automated filter first; offensive names are replaced with “a viewer”, and nothing a viewer writes is ever used to instruct an automated system. We keep these live-stream records for no more than 30 days, and we never sell them.

YouTube. Tata's Faces uses YouTube API Services. Our use of them, and your interaction with our YouTube channel and streams, is governed by the YouTube Terms of Service and the Google Privacy Policy. We access only our own YouTube channel and the public activity on it; we never access a viewer's YouTube or Google account. Anyone can review or revoke an app's access to their Google account at Google's security settings. To ask us to delete data we hold that came from YouTube or any other platform, email tata@tata1000faces.com; we act on deletion requests within 30 days.

Tata Companion (browser extension and desktop app)

The Tata Companion is a small animated Tata that lives in your browser or on your desktop. It collects no personal data and sends nothing to us or to anyone else: it has no analytics, no tracking and makes no network requests of its own. To choose what the Tata does, the browser extension looks, on your own device only, at whether media is playing on the current tab, the site's domain name and a rough word count of the page; none of this is stored or transmitted. The desktop app, if you connect it to an AI coding assistant, receives only the names of the tools your assistant uses (for example "email" or "search") from your own computer, never your prompts, files or messages. On Windows, its optional playful features read window positions, program names (never window titles) and the speaker output level on your device so the Tata can perch on windows or cover its ears; it never uses a microphone, and these features can be switched off. Your settings are kept locally on your device. Uninstalling the extension or app removes everything it stored.

Retention

Analytics data is retained for up to 14 months. Live-stream chat and support records are kept for no more than 30 days. Order records are kept as long as tax and accounting rules require. Email sign-ups are kept until you unsubscribe or ask us to remove them.

Your rights

You can ask us what we hold about you, ask us to correct or delete it, or object to how we use it. Residents of the EU/EEA, UK, California and other jurisdictions with privacy laws have the rights those laws provide. See Data deletion for how to ask.

Children

The site and shops are not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

Contact

For privacy questions, data access requests, or anything else about this policy, email tata@tata1000faces.com. We are Tata's Faces Corp, 13506 NE 22nd Ct, North Miami, FL 33181, USA, a corporation registered in Florida. For deletion requests see Data deletion.

Changes

We will post any changes here with a new effective date.

Tata's 1000 Faces (TATA 1000 FACES) is a brand of Tata's Faces Corp, 13506 NE 22nd Ct, North Miami, FL 33181, USA. Contact: tata@tata1000faces.com — we answer within a few days. You can also message us on the platform you purchased from.