Privacy Policy

What We Collect

• Order information. When you buy, we receive your name, email, and shipping address from our payment processor so we can make and deliver your order.
• Payment information. Card details are entered on Stripe's secure checkout and are processed entirely by Stripe. Your card number never touches our servers.
• Account information. If you create an account: your email, name, and a securely hashed password. Creating an account is optional; guest checkout works fine.
• Cart contents. Your cart is stored in your own browser (localStorage), not on our servers, until you check out.
• Abandoned checkout. If you start a checkout, enter your email, and do not finish, we keep that email and cart so we can send you a reminder. Every reminder has an unsubscribe link.

Who We Share It With

Only the services required to get a shirt from the press to your door:

• Stripe processes payments.
• Printful prints and ships your order, so they receive your name and shipping address.
• Resend delivers our transactional emails (order confirmations, tracking).

We do not sell, rent, or trade your personal information. Ever. We do not run third-party ad trackers on this site.

Cookies & Local Storage

We use one session cookie if you sign in to an account, and localStorage for your cart. That is it. No cross-site tracking pixels, no fingerprinting.

Email

Transactional emails (order confirmation, shipping notification) are part of your purchase and cannot be opted out of while an order is active. Marketing emails are opt-in only, and every one carries a working unsubscribe link.

Your Rights

Wherever you live, we extend the same rights to everyone:

• Ask for a copy of the personal information we hold about you
• Ask us to correct it
• Ask us to delete it (we keep what tax law requires us to keep about completed orders)
• Opt out of marketing at any time

Email [email protected] and we will handle it within 30 days.

Children

We sell youth and baby sizes, but this site is for adults to use. We do not knowingly collect personal information from anyone under 13.

Security & Retention

Passwords are hashed with bcrypt, traffic is encrypted with TLS, and payment data lives with Stripe, a PCI Level 1 processor. We retain order records for as long as tax and accounting law requires, then remove them.

Changes

If we change this policy, we update the effective date at the top. Material changes get an email to account holders.