Privacy Policy

What we collect

When you place an order we collect your name, email, shipping address, and order details. Payment card details go straight to our payment processor — we never see or store your full card number.

When you check out we also keep a short record of your bag and the shipping address used to work out sales tax, so the order we record matches what you were charged.

When you join our newsletter we store your email address, when you signed up, and whether you're subscribed.

When you ask to be emailed about a hat that's sold out or coming soon, we store your email address and which hat you asked about. That list is used only for that one email — it isn't our newsletter.

When you write a review we store the name you give, your email address, your rating and what you wrote. We use the email only to check whether it matches an order; it is never published.

When you use the contact form we store your name, email address and message so we can reply.

To stop bots and abuse, we keep short-lived rate-limit records tied to your IP address, and our host records basic technical logs (IP address, browser type, pages requested) to keep the service secure and running.

Why we use it

To process and ship your order, send order and shipping updates, provide support, prevent fraud and abuse, and — only if you opt in — send occasional product news. We do not sell or rent your personal information to anyone.

Who processes it for us

We share the minimum necessary data with trusted providers who run parts of the store on our behalf: Stripe (payments and sales tax), Resend (to deliver the emails we send you), and Google Firebase (hosting and database). Each processes data under its own privacy terms.

Cookies

We use only the cookies required to keep your cart and session working. We do not run third-party advertising trackers. If we ever add analytics, we'll update this page and, where required, ask first.

Your rights

You can ask us to access, correct, or delete your personal data, or unsubscribe from email at any time (every marketing email we send includes an unsubscribe link, or just email us). Email stickshats@gmail.com and we'll respond within 30 days.

Data retention & security

We keep order records as long as needed for tax, accounting, and support, then delete or anonymize them. Data is transmitted over HTTPS and access is restricted.

Children

This store is not directed to children under 13 and we don't knowingly collect their data.

Contact

Questions about privacy? Email stickshats@gmail.com.