Only what we need.

What we collect

• Account: name, email, password (hashed). With Google sign-in: name and email from Google.
• Orders: shipping address and order history. Needed to fulfil purchases and required for accounting.
• Activity: follows, saves, likes. They power your feed and lists.
• Payments: handled entirely by Stripe; we never see card numbers.

Cookies

One essential cookie keeps you signed in. No advertising cookies, no third-party trackers. Which is why there's no cookie banner.

Email

Transactional email (orders, shipping, refunds) is part of the service. Drop alerts and anything marketing-flavoured only go out with your consent. Manage it in settings, or unsubscribe from any email.

Your rights (GDPR)

• Export your data anytime from settings.
• Request account deletion from settings. Processed within 30 days (order records are retained where the law requires).
• Data is stored in the EU (Supabase, eu-west) and shared only with the processors that run the service: Stripe (payments), Resend (email), Vercel (hosting).