Privacy Policy & Data Governance
Last Updated: September 2026 • Effective Worldwide
Our Zero-Data Selling Guarantee:
MakeMyJersey.com never sells, rents, or monetizes customer designs, vector crests, team rosters, or private phone numbers to data brokers. Customer-uploaded vector graphics and team lists are exclusively processed for the physical sublimation manufacturing and direct delivery of your custom kits.1. Information We Collect
When you configure custom jerseys, join a team locker room, or place orders on MakeMyJersey.com, we collect the following categories of information:
- Account Identifiers: Full name, email address, password hash, and optional club/academy affiliation.
- Team Roster Data: Player names, jersey numbers, and selected athletic sizes (S, M, L, XL, etc.) provided for customized team printing.
- Customer Artwork & Vector Assets: Uploaded team crests, sponsor logos, and AI-prompted pattern textures. All uploaded SVGs are automatically stripped of executable scripts via anti-XXE/XSS sanitizers.
- Payment Tokenization: Credit card data is processed directly via Stripe Elements / Apple Pay / Google Pay. MakeMyJersey.com servers never touch or store raw card numbers.
- Technical Telemetry: Anonymized WebGL performance metrics, screen resolution, and IP addresses used solely for fraud prevention and rate limiting.
2. Legal Basis for Processing (GDPR Article 6)
We process your personal information strictly under lawful bases:
Fabricating custom sublimation jerseys, generating factory cut-and-sew print files, and shipping via DHL/FedEx.
Preventing card fraud, safeguarding 3D WebGL render workers against DoS attacks, and tracking order production stages.
3. Your Data Subject Rights (GDPR & CCPA)
Regardless of your country of residence, MakeMyJersey.com provides full self-service autonomy over your personal data:
Export all your saved 3D kit states, order history, and team roster sheets in machine-readable JSON format directly from your Account Settings.
Permanently purge your account, saved 3D drafts, and roster data with 1-click self-service deletion in compliance with GDPR Article 17.