Privacy

Cookies

We set none. Your cart and your answer to the consent banner sit in your own browser’s storage and are never sent to us. Stripe sets its own cookies on the payment step for fraud checks on the card form, under Stripe’s privacy policy, and only if you get that far.

Measurement

Only if you press Accept. Pressing Reject makes no request at all, rather than a request carrying a flag that says to ignore it.

When it does run, each page view records: the page, where you arrived from, the country and city your network resolves to, whether you are on a phone, tablet or desktop, your browser and operating system, how far down the page you scrolled and how long you stayed.

Your IP address is hashed with a salt we rotate and is never written down in the clear. Views inside one visit are tied together by a random key held for that visit only, so two visits by the same person cannot be joined up. It runs on our own database. There is no third-party pixel on this site.

What is stored

• Your email, delivery address and phone number, needed to fulfil the order.
• Card brand and last four digits only. The full number goes straight to Stripe and never reaches our servers.
• The measurement described above, if you accepted it.
• An account, only if you choose to make one. Buying does not require it.

Who else sees it

• Stripe takes the payment and receives your card details directly.
• Chit Chats receives your name, address, email and phone to book the courier and produce the label.
• Resend sends your order emails and receives your email address.
• Vercel hosts the site and handles the request traffic.

Retention

Measurement data is deleted after 90 days by a nightly job. Order records are kept as long as tax law requires us to keep them.