Privacy

This page will be our full privacy notice. Publishing a complete one means naming every processor we share data with and committing to specific retention periods, and that review is not finished — so this is a summary of what the site does today rather than the finished notice.

What the site collects today

• An account, if you create one: your email address, your name if you give it, and a hash of your password — never the password itself.
• Your cart and your orders, so they are still there when you come back.
• A session cookie that keeps you signed in, and a second cookie that protects forms against cross-site request forgery. Both are strictly necessary for the shop to work.
• Your IP address, briefly, to rate-limit abuse of sign-in and other sensitive endpoints.

What the site does not do

• No advertising or analytics trackers, and no third-party cookies.
• We do not sell or rent your personal data.
• Card details never reach our servers — payment is handled by our payment provider.

You can ask us what we hold about you, ask for it to be corrected, or ask for your account and its data to be deleted. Until the full notice is published, please contact us with any question about how your data is handled.