Policies
Privacy Policy
Last updated: July 2026
What we collect
When you place an order, create an account, or sign up for updates, we collect the information you provide directly: name, email address, shipping address, and order details. If you pay by card, payment is processed by Stripe — we never see or store your full card number.
We also automatically collect basic technical information (IP address, browser type, pages visited) through standard server logs, used only to operate and secure the site.
How we use it
- To fulfill and ship your order, and to contact you about it.
- To maintain your account and order history, if you create one.
- To send order confirmations and, if you opt in, occasional updates.
- To keep the required manufacturing/lot records for our regulated products.
We do not sell your personal information to anyone.
Who we share it with
Only the services that need it to run the store: Stripe (payment processing), Resend (transactional email delivery), and Railway (hosting and database). Each processes your data under their own privacy and security terms.
Cookies & local storage
Your shopping cart is stored in your browser's local storage, not on our servers, until you check out. Signed-in sessions (admin or customer account) use a secure, essential session cookie required for the site to function — we don't use third-party advertising or tracking cookies.
Your choices
You can view or update your shipping address any time from your account page. To request a copy of your data, or to have your account and personal data deleted, contact us using the details on our contact page — we'll retain only what applicable recordkeeping law (e.g. manufacturing lot traceability) requires us to keep.
Questions
Reach out any time before or after you buy — see the contact information in the site footer.
This policy is a plain-language starting point and hasn't been reviewed by an attorney — have it checked against your actual data practices and applicable law before relying on it.