What we keep.

When you check out we store your name, email, WhatsApp number, state, delivery address, and the order itself: the pieces, sizes, quantities, items total, status and payment status. We use that to reserve the pieces, email you, confirm payment, quote the delivery fee and deliver the order.

We do not ask for your bank account. You pay into the account we publish on the order page. That account name comes from our settings.

Early access stores the email you enter, and a name or WhatsApp number only if you give them. We use them to tell you when the collection opens. A duplicate email does not create a second record and does not tell anyone whether you were already on the list.

If analytics is switched on, we record page views and five events: viewing a product, adding to bag, starting checkout, placing an order (the order reference and the number of items only), and joining the list (no email). Session replay is off. Inputs are masked if replay is ever turned on. An analytics failure does not stop an order.

The order confirmation page sets one cookie for the browser that placed the order. It holds a random token, not your name or email, lasts two hours, and is sent only to that order’s page. Admin sign-in uses a separate session cookie. Analytics, when on, may store its own identifier. It is not tied to your order email.

The shop is hosted on Vercel. Orders and the list are stored in Supabase. Email is sent with Resend. Analytics, when the key is set, is PostHog. WhatsApp receives a message only when you choose to open it.

We keep order and list records for as long as we need them to fulfil the order, answer a question about it, and keep our accounts. To ask about your record, message us on WhatsApp.