Privacy policy

This is the demo store's sample policy.

This page lists what the site stores about you, why, and who else handles it. It describes what the site does; it doesn't promise anything the site can't do.

What the store keeps

Your account. Your name, email address and, if you set one, a password (stored as a hash, never in readable form). If you sign in with Google, the store receives your name, email address and profile picture from Google. Your role on the site (customer or seller) is stored with the account.

Your orders. For each order: the email address and shipping address you entered at checkout (name, phone, address lines, city, province or state, postal code), the items, prices, discount code and shipping method, the payment status, and a dated history of the order's status changes.

Saved addresses, cart and wishlist. Addresses you save in your account, the items in your cart and wishlist, and a discount code you've applied to your cart.

Things you write. Product reviews, journal comments and the ratings or comments you send through Rate us, with your account. Reviews and comments are published under your name once the store approves them.

Newsletter. If you sign up, the store keeps your email address, the date you signed up and the date you confirmed it, and emails you a confirmation link. Your address joins the list only when you open that link and confirm; an address that is never confirmed stays off the list. The link expires; signing up again sends a new one. The site doesn't send newsletters itself; store staff can export the list of confirmed addresses. To be removed from it, contact us through the Contact page.

Sellers. A seller's shop name, description and storefront details, the products they list, and the identifier of the Stripe account they connect for payouts, with the payout records for their orders.

Account notices. Messages the store shows in your account, such as a welcome note or a change to your store credit.

What the store doesn't keep

Your card details. Payment happens in a form provided by Stripe, and card numbers go directly to Stripe. When you're signed in and choose to save a card, Stripe stores it against a Stripe customer record linked to your account; the store keeps only that record's identifier.

Who else handles your data

• Stripe processes payments and refunds, and, for sellers, the connected accounts and payouts. Stripe receives the payment amount and order number, and for signed-in shoppers your name, email address and account identifier to create the customer record.
• An email delivery service, when the store has one configured, sends your order confirmation, password and newsletter confirmation emails.
• An image host, when the store has one configured, stores product photos and seller images. No customer data is uploaded to it.
• Google, only if you choose to sign in with Google.

Prices in US dollars are converted with a public exchange-rate feed. The store's server fetches the rates; your browser doesn't contact the feed, and nothing about you is sent to it.

The site has no advertising or analytics trackers. The checkout page loads Stripe's script to show the payment form.

Cookies

The site sets only the cookies it needs to work:

Cookie	What it's for
Session	Keeps you signed in.
Cart	Remembers a guest cart on this browser.
Wishlist	Remembers a guest wishlist on this browser.
Language	Remembers the language you picked.
Currency	Remembers the display currency you picked.

The session, cart and wishlist cookies can't be read by scripts on the page.

Rate limits and your IP address

To slow down password guessing and abuse, the site counts requests per IP address on account and sign-in requests (including password resets), checkout, discount codes, newsletter sign-ups and confirmations, and a seller's payout setup, and refuses requests over the limit until the counting window has passed.

Demo logins

If this demo offers shared logins, anything you change while using them (cart, wishlist, addresses, reviews, unpaid orders) is reset to the demo's starting state on a schedule. Don't enter real personal details while using a shared login.

Your choices

• You can check out without setting a password, and you can set or reset one at any time through Forgot password.
• You can delete saved addresses, choose your default address, and remove items from your cart and wishlist.
• The site doesn't offer account deletion or a data download. To ask about the data held for your account, or to unsubscribe from the newsletter, contact us through the Contact page.