privacy

what we collect

When you place an order, we collect your name, email address, shipping address, and what you bought. Payment is handled entirely by Stripe, our payment processor. Your card number goes to Stripe, never to us or our servers. Stripe's own privacy policy governs that data.

The shopping bag on this site lives in your browser's local storage, on your device. Nothing in it is sent anywhere until you check out.

who we share it with

Your name, shipping address and order contents go to Gelato, the print partner that produces and ships your order. They receive only what is needed to make and deliver it.

These are the other companies that process data on our behalf, and the only thing each one touches:

• Stripe: payment. Your card details go to Stripe and never to us.
• Vercel: hosting, and the servers that receive your order.
• Neon: the database where your order record and, if you signed up, your email address are stored.
• Resend: sending the emails about your order.
• Cloudflare: storing the print files, and one of our two analytics counters.

We do not sell, rent, share or trade your information to anyone, for any purpose, ever. We have never done so and have no plans to.

analytics, cookies and Do Not Track

We use two aggregate counters: Vercel Web Analytics and Cloudflare Web Analytics. Both count page views. Neither sets a tracking cookie, neither builds a profile of you, and neither follows you to other websites.

This site sets no cookies of its own. The shopping bag is kept in your browser's local storage, on your device, and never leaves it until you check out.

Do Not Track. Some browsers send a "Do Not Track" signal. We do not need to respond to it, because we do not do the thing it asks us to stop: we do not track you across other websites, and we do not allow anyone else to do so through this site. If that ever changes, this section changes with it and the effective date above moves.

Other parties. No third party collects personally identifiable information about your activity across other websites through this site. When you pay, you are on Stripe's own checkout page, and Stripe's privacy policy governs what happens there.

email

We email you about your order: confirmation, shipping and tracking. Those are part of the order and are not marketing.

If you sign up for the occasional note about new collections, we store your email address for that and nothing else. Marketing email carries an unsubscribe link and our postal address, and leaving takes one click. We do not currently send any marketing email at all.

children

This store is not directed at children and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us information, email hello@stoaplates.com and we will delete it.

retention and your rights

We keep order records as long as tax and accounting rules require. Email addresses given for marketing are kept until you unsubscribe.

You can ask us what personal information we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email hello@stoaplates.com and we will act within 30 days. We will not charge you for it and we will not treat you differently for asking.

Several US states give their residents these rights by statute. This store is well below the size at which those laws apply, so we are not currently obliged to offer them. We offer them to everyone anyway, because the alternative is drawing a line through our own customers based on where they live.

changes

If this policy changes, the new version appears here with a new effective date.