Privacy Policy

1. What I collect

When you place an order

• Your name, email address and shipping address.
• What you ordered, including chosen colors, options and any personalization or gift note.
• The order number, totals, sales tax and shipping, and the order's status and tracking details.

Payments are handled by Stripe on its own secure checkout page. Your card details go to Stripe and are never seen or stored by this shop; I only receive a confirmation that the payment went through.

When you send a message

Your name, email address, optional order number and your message.

To prevent spam and abuse

When you send a message or start a checkout, a scrambled code made from your internet (IP) address is stored, so the shop can limit how many messages or checkouts come from one place in an hour. Your actual IP address is not stored.

Your cart

Your cart is saved in your own browser on your device. It isn't sent to the shop until you check out.

When you browse the shop

The shop uses PostHog, a website analytics service, to understand how visitors use the site so I can make it better. It records:

• The pages you visit, the links and buttons you click, and shop actions such as adding to cart, starting checkout and placing an order.
• Your browser, device type, screen size, the site that sent you here, and an approximate location (city and country) worked out from your IP address.
• Recordings of how pages were used (scrolling, clicks and page changes), to find confusing or broken spots. Anything you type into a form is hidden from these recordings.

Analytics never includes your card details, and the shop doesn't send your name, email address or shipping address to PostHog. Visits are counted under a random ID, not your name.

2. How it's used

• To make, pack and ship your order.
• To email you about your order: received, accepted, shipped, or if there's a problem.
• To answer your messages and provide customer support.
• To keep records of sales and sales tax.
• To protect the shop from spam and misuse.
• To see which pages and products people visit and where the site could work better (analytics).

I don't sell your information, and I don't use it for advertising or send you marketing emails.

3. Who it's shared with

Only with the services needed to run the shop, and only what each one needs:

• Stripe: takes your payment and handles refunds.
• Supabase: stores the shop's database (orders and messages) and product photos.
• Netlify: hosts the website.
• Resend: delivers the shop's emails to you.
• PostHog: website analytics, as described above (servers in the United States).
• Shipping carriers (such as USPS): your name and address, to deliver your package.

Information may also be shared if the law requires it.

4. Cookies

The shop uses analytics cookies and browser storage from PostHog. They hold a random ID, so repeat visits can be counted as the same visitor, and they don't contain your name or contact details. The shop doesn't use advertising cookies, and your information is not used to show you ads anywhere.

Your cart is kept in your browser's storage, as described above. Stripe's checkout page uses its own cookies to process payments securely and prevent fraud; see Stripe's privacy policy for details.

5. How long it's kept

• Orders, including your name, email address, shipping address and what you ordered: 3 years from the order date (how long sales tax records are kept), then deleted automatically.
• Messages sent through the Contact form: 3 years from when they were sent, then deleted automatically.
• Checkouts that were started but never paid for: deleted after 7 days.
• Analytics: kept by PostHog for as long as its plan allows (currently up to 1 year for visit data and about a month for page recordings), then deleted.

Stripe keeps its own payment records under its own policies and legal obligations.

6. Your choices

You can ask to see the information the shop has about you, to correct it, or to delete it. Email aggressivelyhelpful.shop@gmail.com and I'll help. Some information may need to be kept for a while, for example for tax records or to complete an order in progress.

To turn analytics off, switch on Global Privacy Control or "Do Not Track" in your browser: the shop then doesn't start PostHog at all. Blocking cookies or using a content blocker works too. The shop works the same either way.

7. Keeping it safe

The website uses a secure (https) connection. Order information can only be seen by me through a password-protected admin area, and it's stored with services that protect it.

8. Children

The shop is meant for adults. I don't knowingly collect information from children under 13.

9. Changes and questions

If this policy changes, the new version will be posted here with a new date.

Questions about your privacy? Email aggressivelyhelpful.shop@gmail.com.

— Arissa Mueller
Aggressively Helpful | Virginia, USA