Privacy policy

BlankAndBrand LLC runs this shop and decides how the information described below is handled. For anything on this page — a question, a correction, or a request to delete your account — use the contact form.

Only what a shop needs in order to be one:

• Your account. Your name and email address. If you set a password we store only a bcrypt hash of it, never the password itself — we cannot read it, and neither can anyone who obtains the database.
• Signing in with Google.If you use it, we receive your Google account’s email address, name, and its stable identifier, and nothing else. We never see your Google password.
• Orders. What you bought, what you paid, and the delivery address you gave at checkout, so the parcel can be sent and the order can be looked up later.
• Your bag, your pins, and what you’ve looked at. Objects saved or recently viewed, stored as identifiers only — never prices — so your bag survives between visits and the recommendations on your account page mean something. The viewing list is capped and rolls over.
• Reviews. The rating, the words, and any photos or video you attach, shown publicly under the name on your account.
• Messages to us. Whatever you write in the contact form, together with the name and email you give, so we can reply.

We do not collect special categories of personal data, we do not buy data about you from anyone, and we have no advertising trackers on this site.

• To perform the contract when you buy something: taking the order, sending the parcel, handling a return, and answering you about it.
• For our legitimate interests in running a shop: keeping your bag and pins, suggesting objects from what you have looked at, showing reviews, preventing fraud and abuse, and understanding how the site is used in aggregate.
• To meet legal obligations, principally keeping records of sales and tax for as long as the law requires.

Card details never touch our servers. Checkout hands you to Stripe’s own hosted page, where you enter your card directly with them; we receive back only the outcome, the amount, and the delivery address you gave. We hold a Stripe customer reference against your account so repeat orders can be matched up. Stripe’s handling of your payment details is governed by their privacy policy.

We do not sell your information, and we never share it for anyone else’s marketing. It reaches only the services that make the shop function:

• Stripe — takes payment and holds the card details we deliberately never see.
• Resend — delivers the emails we send you: verification codes, order confirmations, and replies.
• Google — only if you choose to sign in with it.
• Our database and file hosting — where accounts, orders, and any photos you upload are stored.
• Anyone the law compels us to tell, and a purchaser of the business, were it ever sold — in which case this policy travels with it.

There are no advertising cookies on this site and nothing here follows you to other sites. The first two below are set whatever you choose, because without them the shop cannot do what you asked it to:

• auth_token — your sign-in session. It expires after 12 hours and is marked HttpOnly, so no script on the page can read it. Signing out clears it.
• google_oauth_state — set for ten minutes during Google sign-in and discarded immediately after. It exists purely to prove the trip back from Google is the one you started.
• pt_consent — which of the two buttons you pressed on the measurement banner. Kept for a year so we do not ask again on every page. It is the one cookie here a script can read, because the banner has to know whether it has been answered.

The next two are set only if you acceptthe measurement banner, and pressing “No thanks” deletes them if they already exist. Both are HttpOnly, so no script on the page can read either.

• pt_vid — sixteen random bytes identifying this browser, kept for a year. It is not derived from anything about you: it is a number we made up, and it means nothing outside our own figures.
• pt_sid— the same idea for one visit. It expires thirty minutes after your last page, which is what makes a “visit” a real thing rather than a guess.

Local storage — your bag before you sign in, and two flags used to count visits when you have not accepted the banner. These stay in your browser; clearing your browser data removes them.

Our analytics are our own. There is no third-party analytics script on this page, nothing is sold or shared with anyone, and none of it is used to advertise to you anywhere. What we record depends on the banner:

• If you decline, or have not answered — we count daily totals and nothing else: how many times a page was viewed, how many visits and visitors there were that day, and which links were clicked. There is no identifier of any kind attached, so no figure can be traced back to a person, not even by us.
• If you accept — the same counting, plus the two cookies above, which let us see one visit as a whole: the pages in it, in order, where you arrived from, roughly what kind of device it was, which country, and whether it ended in an order. That is what lets us tell a part of the shop that works from one that quietly does not.

Either way, some things we deliberately do not keep. We never store your IP address— it is used to rate-limit abusive traffic in memory and is never written down. We never store your browser’s user-agent string either: it is read once to work out whether you are on a phone, a tablet or a computer, and discarded. Country comes from our network provider as a two-letter code, never from a location lookup. Detailed visit records are deleted automatically after ninety days; only the anonymous daily totals are kept beyond that.

You can change your mind at any time by clearing this site’s cookies in your browser, which removes the identifiers and brings the banner back.

• Your account — until you ask us to close it.
• Orders — kept after an account closes, for as long as tax and accounting law requires, since they are records of a sale.
• Viewing history and pins — capped lists that roll over on their own, and removed with your account.
• Reviews — kept while published; tell us and we will remove or anonymise yours.
• Site analytics — detailed visit records, if you accepted the banner, are deleted automatically after ninety days. The anonymous daily totals, which have nothing personal in them, are kept indefinitely.

Depending on where you live you may have some or all of the following rights, and we will honour any of them on request regardless: to see a copy of what we hold about you, to have it corrected, to have it deleted, to object to or restrict how we use it, to receive it in a portable form, and to withdraw a consent you have given.

Write to us through the contact form and we will answer within 30 days. We may need to confirm you are who you say you are before acting on a request. Note that closing your account does not erase the record of orders already placed, which we are required to keep.

This shop is not intended for children, and accounts are for adults. We do not knowingly collect information from anyone under 13 (or the minimum age where you live). If you believe a child has given us their details, tell us and we will remove them.

If this policy changes we will update the date at the top of the page.