Privacy
This is a one-person card shop, not an ad network. I collect what an order needs and nothing else, and I don't sell any of it.
What gets collected
When you order: your name, email, and shipping address, plus what you bought and what you paid.
If you make an account: your email, an optional display name, and a saved shipping address so checkout can prefill it.
If you join the launch list or send a message: your email, and whatever you write to me.
Card details are never collected here. Payments are entered on Stripe’s own checkout page. I never see or store your card number.
Who processes it
Stripe, payments. Supabase, the database and account sign-in. Vercel, hosting. Resend, order and account emails. Chit Chats, the address on your parcel.
Data is stored in Canada and the United States depending on the provider. Each one is bound by its own privacy terms; none of them get your data for their own marketing.
Analytics
Page views are counted with privacy-friendly analytics that use no cookies and build no profile of you, just totals, so I know whether anyone visited. There is no Meta pixel, no Google Analytics, and no ad tracking on this site.
Emails you get
Order confirmations and shipping notices are transactional. You get them because you bought something. Anything promotional (the launch email, an intake drop) only goes to people who asked for it, and every one of those has an unsubscribe.
How long it's kept
Order records are kept as long as the law requires for business books. Account data lives until you ask me to delete it. Launch-list emails are dropped once you unsubscribe.
Your data, your call
Ask and I’ll tell you exactly what I hold on you, correct it, or delete it. Order records tied to completed sales have to stay on the books, but everything else can go. Under Canadian privacy law (PIPEDA) you have the right to make that request, and I’ll honour it, no forms, just an email.