Privacy Policy
What's collected, who holds it, your rights.
1. What Stripe collects on our behalf
Payment is processed by Stripe, Inc. on a page hosted by them. At checkout, Stripe collects:
- Your name and shipping address (to deliver the order).
- Your email address (Stripe sends the receipt; we use it for order-related contact only).
- Your card details (handled entirely by Stripe; we never see, store, or transmit them).
Stripe's privacy policy governs how they handle that data: stripe.com/privacy. Stripe is PCI-DSS Level 1 certified and retains transaction records for the periods required by law (typically 7 years for tax purposes).
2. What we collect ourselves
- Server logs (IP address, browser user-agent, page requested, timestamp) — retained 30 days for security and operational diagnosis.
- Your cart contents — stored in your browser's local storage on your own device, never on our servers. Clearing your browser data clears your cart.
That is the complete list. We do not maintain a customer database. We do not have an internal record of who has placed an order — that lives only in Stripe.
3. No analytics, no tracking
We do not use Google Analytics, Facebook Pixel, advertising cookies, or any other tracking pixels. We do not maintain a marketing email list. We do not share or sell any information to anyone for any purpose.
4. Who else helps deliver your order
- Supabase, Inc. — hosts the small serverless function that creates Stripe checkout sessions. SOC 2 Type II compliant. supabase.com/privacy
- GoDaddy.com, LLC — web hosting and domain registrar.
- Shipping carriers (USPS, UPS, or FedEx, depending on the order) — to deliver your package and send you tracking notifications.
5. Your rights
Depending on where you live, you may have the right to access, correct, or delete personal information held about you. Because we do not independently hold customer data, most privacy requests are forwarded to Stripe per their published process. Email support@superstructuring.com with the subject "Privacy request" and we will respond within 30 days, including pointing you at Stripe's data-subject request flow when applicable. We can independently delete server-log entries and localStorage references on request.
6. Children, security, changes
The site is not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us information through the site, email support@superstructuring.com and we will delete what we have.
We use HTTPS site-wide and rely on industry-standard providers (Stripe, Supabase) for payment and data storage. No system is perfectly secure.
We will update the "Last updated" date below when we change this policy. Material changes will also be communicated by email if we have a way to reach you.
7. Contact
Privacy questions: support@superstructuring.com. See our Contact page for full details.