Legal
Last updated August 2026
Account name and email, shipping addresses you save or enter at checkout, and order history. Passwords are hashed (bcrypt) — nobody, including the site operator, can read them back.
Order data lives in a Postgres database. Payment details go directly to Stripe — this site never sees or stores card numbers. Shipping addresses are sent to EasyPost solely to calculate rates. New orders and account signups trigger a signed webhook event to an n8n automation workflow, which syncs a contact/deal to a CRM (HubSpot) and sends transactional email — no data is sold or shared beyond what those integrations require to function.
A session cookie keeps you signed in; a separate cookie identifies your cart before you sign in. Neither is used for advertising or cross-site tracking.
Since this is a demo project, the database is periodically reset and all data — accounts, orders, addresses — is wiped as part of that. There's no long-term retention to request deletion from.