Privacy

What we collect

At checkout: your name, email, shipping address and phone number. That is what a carrier needs to physically deliver a box to you — we ask for nothing beyond it.

Automatically, and anonymously: which pages you open, what you click, and which browser you use. No name, no email, no address, no order number, and not your IP address — where an identifier is needed at all it is a random one your browser made up, or a one-way hash. We use this to see which products get looked at and where the checkout breaks, and it cannot be traced back to you. The shop pages set no cookies of our own: that identifier, your cart, your language and your shipping-country choice all live in your own browser's storage. The PayPal buttons on the checkout page load PayPal's own script, which sets PayPal's cookies under PayPal's privacy policy.

What we do and do not track

Our analytics run on PostHog, with servers in the European Union. It is told about page views, clicks, adding to the cart, and starting or finishing a checkout — never your name, email, address, phone number or order number; those go only to the companies listed below. We have turned off its location lookup, so it does not work out your city, and we never tell it who you are. Of your order it sees three things and no more: which country you picked for shipping, the total, and how many items — enough to tell us that checkout is broken in a particular market, nowhere near enough to tell one order apart from another. There is no Google Analytics, no Meta pixel, no advertising cookies and no session recording.

We do not sell, rent or trade your details. There is nobody to sell them to that we would want to do business with.

Who else sees your address

Three companies, each because the order cannot happen without them:

CJ Dropshipping (China) — they pack and ship your parcel, so they receive your name, address and phone number. · PayPal — they process the payment; we never see your card number. · Our hosting and database providers, Vercel (United States) and Supabase (Singapore), which is where the order record physically sits.

That means your address travels to China, the United States and Singapore. We would rather say so plainly than bury it. A fourth company, PostHog (European Union), receives the anonymous browsing data described above — nothing that could identify you, and nothing that ties it back to your order.

How long we keep it

Order records stay for as long as we might need them for a refund, a dispute or tax purposes — in practice a few years. Abandoned carts that never became an order are cleared out.

Getting a copy, or getting deleted

Email us and ask. We will send you what we have, or delete it, within a few days. No form, no identity verification theatre — although if you ask us to delete an order that has not arrived yet, we will check you really mean it first.

Children

This shop is not aimed at children and we do not knowingly collect their data.