Privacy Policy
Last updated:
On this page
Privacy Policy
Last updated: June 2026
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and phone number (optional). Your password is stored using one-way encryption (bcrypt) and is never stored in plain text.
Order Information
When you place an order, we collect your shipping and billing address, email, phone number, and payment method. Payment card details are processed directly by our payment providers (Stripe or PayPal) and are never stored on our servers.
Contact Form
When you submit a contact form, we collect your name, email, phone (optional), subject, topic, message, and IP address (for spam prevention).
Product Reviews
When you leave a review, we collect your name, email, rating, review text, and any images you upload. Reviews are subject to moderation before publication.
Newsletter
When you subscribe to our newsletter, we collect your email address. You can unsubscribe at any time using the link in each email.
Technical Information
We automatically collect your IP address, browser type, and device information through server logs and cookies. See our Cookie Policy for details.
2. How We Use Your Information
- Order processing — Fulfilling orders, processing payments, sending confirmations
- Communication — Responding to inquiries, order updates, account notifications
- Security — Preventing fraud, spam, and unauthorized access (CAPTCHA, rate limiting)
- Analytics — Understanding website usage to improve our service (only with your consent)
- Legal compliance — Tax reporting, responding to legal requests
3. Third-Party Services
We use the following third-party services that may process your data:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Stripe | Payment processing | Payment card details, billing info | stripe.com/privacy |
| PayPal | Payment processing | Payment details, billing info | paypal.com/privacy |
| Google Analytics | Traffic analysis | IP (anonymized), browsing behavior | policies.google.com/privacy |
| Meta Pixel | Advertising & conversion tracking | Page views, add-to-cart, purchase events | facebook.com/privacy |
| Google One Tap | Sign-in authentication | Email, name (JWT token only) | policies.google.com/privacy |
| Google Fonts | Font delivery | IP address (CDN request) | policies.google.com/privacy |
| Cloudflare Turnstile | Bot protection (CAPTCHA) | Browser fingerprint, IP | cloudflare.com/privacy |
| Cloudflare Web Analytics | Privacy-first analytics | Page views (no cookies) | cloudflare.com/privacy |
| jsDelivr CDN | CSS/JS delivery | IP address (CDN request) | jsdelivr.com/privacy |
Note: Google Analytics and Meta Pixel are loaded only after you accept cookies via our consent banner. Cloudflare Turnstile is classified as essential/security and operates without separate consent.
We never sell your personal data to third parties.
4. Cookies & Similar Technologies
We use cookies and localStorage to operate our website. For detailed information about each cookie, see our Cookie Policy.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Order records | Retained as required for tax and accounting obligations |
| Account data | Until you request account deletion |
| Contact messages | Until deleted by administrator |
| Newsletter subscriptions | Until you unsubscribe |
| Application logs | 14 days |
| Session data | 14 days |
| Review images | Until review is removed |
6. Your Rights
You have the right to:
- Access your personal data — contact us to request a copy
- Correct inaccurate data — update your profile in account settings
- Delete your data — contact us to request account and data deletion
- Object to processing — contact us to opt out of specific processing activities
- Data portability — contact us to receive your data in a portable format
We will respond to all data subject requests within 30 days.
7. Data Security
We protect your data using:
- HTTPS encryption for all connections
- Bcrypt password hashing (one-way, industry standard)
- PCI-compliant payment processing (card data never touches our servers)
- CSRF protection on all forms
- Rate limiting to prevent brute force attacks
- Regular security audits
8. Children
Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.
10. Contact
For privacy-related questions or data subject requests, please contact us at our store email address listed in the website footer, or use our contact form.