Legal
Privacy policy
This page explains what we collect, who receives it and why. If anything here is unclear, ask.
What we collect
To ship your order we need your name, shipping address and email address, and we keep a record of what you bought and what you paid. That record is stored in a Postgres database hosted by Neon, in the United States.
We never see your card. Payment happens inside PayPal, on PayPal’s own page. We receive a confirmation, an amount and a transaction ID, not a card number.
Who receives it
- Printful prints and ships your order. They receive your name and shipping address, because they are the ones who put it on the box.
- PayPal handles the payment. They receive whatever you give them directly, plus the order total and the shipping address, which is what their seller protection is based on.
- Resend sends our emails. They receive your email address in order to deliver the receipt and the tracking notice.
- Neon hosts the database the order record is stored in.
- Netlify hosts the site and its checkout.
- Meta runs Facebook and Instagram, where we advertise. Through the Meta pixel they receive the page and shopping events described under Measurement below.
- Microsoft provides the session recordings. Through Clarity they receive a recording of each visit to this site, as described under Measurement below, with the checkout form masked.
- Google measures our Google Ads. Through the Google tag they receive the page and order events described under Measurement below.
- Cloudflare counts visitors. Their Web Analytics beacon reports page views and load times, as described under Measurement below.
Nothing is sold or rented, and nothing is shared with anyone who is not named on this page.
Measurement
Meta pixel (Facebook and Instagram)
This site uses the Meta pixel, a script from Meta. It reports what happens on the site to Meta: each page you view, the products and collections you look at, items you add to the cart, when you start checkout, and completed purchases. With those events it sends the product IDs involved, the number of items and the dollar amount. Along with each event, Meta receives what your browser sends to any website, such as your IP address, your browser and device type, and the address of the page. The store’s own code does not add your name, email address or shipping address to these events. However, if you fill in the checkout form, Meta’s script may send a scrambled (hashed) copy of details you type there, such as your email address, name and ZIP code, to Meta so that the visit can be matched to a Facebook or Instagram account.
The pixel sets a cookie on this site called _fbp so Meta can recognize your browser on later visits, and a second one, _fbc, when you arrive from a link on Facebook or Instagram, such as an ad. We use the pixel to measure how our Facebook and Instagram ads perform, and to show ads on Facebook and Instagram to people who have visited this site before. What Meta does with the data is set out in the Meta Privacy Policy. You can clear or block these cookies in your browser, and you can control how Meta uses activity from other websites in your Facebook or Instagram ad settings.
Microsoft Clarity
This site uses Microsoft Clarity, which records session replays and builds heatmaps from them: where you click, how far you scroll and how your mouse moves, over the page as it was displayed to you, text included, along with the kind of device and browser you used. We use them to make the store easier to use. Those recordings are sent to Microsoft, and Microsoft also collects and uses that data for its own purposes, which can include advertising, as set out in the Microsoft Privacy Statement. The name, email and address fields at checkout are masked, so what you type into them is never recorded, and neither is the line on the order confirmation that repeats your email. Clarity may set its own cookies to tell one visit from the next.
Google tag
This site uses the Google tag for Google Ads conversion tracking, not Google Analytics. It is here so that advertising can be measured. It receives page views and these shop events: what was viewed, what was added to the cart, when checkout was started and, on a completed order, the order number and the amount. No name, email or address goes with them. The tag may set its own cookie on this site so that a click on an ad and the order that follows it can be matched up. Where a conversion label is configured, the completed order is sent a second time as the conversion Google Ads counts. What Google does with that data is set out in the Google Privacy Policy.
Cloudflare Web Analytics
This site uses Cloudflare Web Analytics to count page views and measure how long pages take to load. This beacon sets no cookies and stores nothing in your browser, and Cloudflare’s own documentation says it does not track individual visitors across the sites that use it. What comes back to us is totals, such as page views and load times broken out by page, country, referrer, device, browser and operating system, rather than a record of any one person. Cloudflare sets out its own handling of the data in the Cloudflare Privacy Policy.
Cookies
Your cart is kept in your own browser’s local storage, which never leaves your device and is not readable by us. The store itself does not set tracking cookies. The measurement tools described above set their own cookies on this site:
- The Meta pixel sets
_fbp, and_fbcwhen you arrive from a link on Facebook or Instagram. - Microsoft Clarity may set its own cookies.
- The Google tag may set its own cookie.
- Cloudflare Web Analytics sets none.
How long we keep it
Order records are kept for as long as we may need them for tax and dispute purposes, and then deleted. You can ask us to delete yours sooner, and we will, unless a tax obligation says otherwise. In that case we will tell you which one.
Seeing, correcting or deleting your data
Email bryanramirez1220@gmail.com to see what we hold about you, to correct it, or to have it deleted. You do not need to use any particular form or wording.