Privacy Policy

We collect information that you provide directly to us when you create an account, make a purchase, or contact us. We also collect certain technical information automatically. This includes:

• Personal information (name, email address, phone number)
• Shipping and billing address (for physical product orders only)
• Payment information (processed securely by Stripe — we never store your card details)
• Account credentials and preferences
• Communication preferences and correspondence
• Order history and transaction records
• Device information, IP address, browser type, and operating system (collected automatically)

We use the information we collect to:

• Process and fulfill your orders
• Communicate with you about orders, products, and services
• Improve our website, products, and customer service
• Send promotional communications (only with your explicit consent)
• Detect, prevent, and address fraud and security issues

We may share your information with:

• Service providers who assist in our operations (error monitoring, analytics)
• Stripe, our payment processor, to securely complete transactions
• Shipping partners to deliver physical product orders
• Legal authorities when required by law

We use minimal cookies and privacy-respecting analytics to operate our website. We do not track you for advertising or personalization purposes. Our tools include:

• Session cookies to maintain your shopping cart and login state
• Umami (privacy-focused, cookieless analytics) to understand site usage patterns without tracking individual users
• Cloudflare security cookies to protect against threats and ensure site performance
• GlitchTip for error monitoring and service reliability (no personal data collected)

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Opt out of marketing communications

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Payment processing is handled entirely by Stripe using industry-standard encryption. In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is retained while your account is active and for a reasonable period afterward. Transaction records are retained as required by applicable tax and financial regulations. You may request deletion of your account and associated data at any time by contacting us.

As we serve customers worldwide, your information may be transferred to and processed in countries other than your own. Our service providers, including Stripe (payment processing) and Cloudflare (security and performance), may process data in various jurisdictions. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Our services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us immediately.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us through our contact page.