Your Privacy Matters
We built this site with privacy as a core principle, not an afterthought.
We collect only what is necessary to fulfill your order and run our shop. Nothing more. We don't sell data, we don't track you across the web, and we certainly don't want your personal secrets.
The Essentials
To get your handcrafted items to your door, we need a few basics:
- Contact Info: Your name, email, and shipping address.
- Order Details: What you bought and when, so we can craft and ship it.
- Support History: If you email us, we keep that thread so we can help you better next time.
The No-List
There are things we simply do not do:
- Credit Cards: Payments are processed securely by Stripe. We never see, touch, or store your card numbers.
- Passwords: We don't force you to make an account. No passwords to lose, steal, or forget.
- Third-Party Tracking: We do not use third-party advertising pixels, tracking beacons, or analytics services. We never sell, share, or rent your data to anyone.
Storefront Analytics
To understand how our shop is used and improve your experience, we run our own first-party analytics. This records which pages are visited, how visitors move through the store, and basic device information — all stored on our own servers and never shared with third parties.
We use a standard Django session cookie (the same one that keeps your cart working) alongside a hashed, anonymized visitor identifier to count unique visits. Staff browsing, admin pages, and static files are excluded from tracking.
Our Django session cookies are strictly necessary to operate the store (cart, checkout, security). Because our analytics are first-party only and never shared with third parties, no cookie consent banners are required.
Security by Design
Your order numbers are fully serialized and random. This means no one can guess another customer's order number by just changing a digit. Access to your order details requires a secure, unique link that we only send to your email.
Trustworthy Partners
We share data with exactly two types of services: Stripe (to process your payment) and Carriers like USPS, UPS, and FedEx (to deliver your package). That is the entire list.
Your Rights
If you want to know exactly what data we have on you, or if you want us to anonymize your historical data, you can do it instantly through our self-service portal.
We respect your right to disappear. Upon request (or via the button below), we will redact your name, address, and email from our order records, replacing them with generic placeholders. This protects your privacy while allowing us to keep accurate financial records for tax purposes.
Our Data Retention Promise
- 1-Year Privacy Promise: We automatically anonymize all orders one year after purchase. Your personal data is permanently removed from our records, ensuring that after 365 days — to quote a certain wizard — we have "no memory of this place."
-
Permanent Access:
Your unique Order Status URL (e.g.,
.../order/status/SB-.../) will always work. You can save that link to view your order details forever, even after we have forgotten who you are.
Manage Your Data
Access your data archive or request anonymization.
Prefer to talk to a human? Email [email protected] .