privacy & cookies

the short version

we keep cookies and storage to the absolute minimum. there are no analytics trackers, no advertising cookies, and no data sold to third parties. the only things stored on your device are what we need to keep you signed in and to process payments securely.

authentication (localStorage)

when you sign in as a member, your session token is stored in your browser's localStorage by our authentication provider. this keeps you logged in across page visits so you don't have to sign in every time.

• what: a session token and refresh token
• why: to keep you signed in
• how long: until you sign out or the session expires
• who else sees it: nobody — it stays in your browser

you can clear this at any time by signing out or deleting site data in your browser settings.

payments (Stripe cookies)

our shop checkout is powered by Stripe. when you proceed to payment, Stripe may set cookies required for fraud prevention and to complete the transaction securely.

• what: session and device identifiers
• why: fraud detection and payment security
• how long: typically the browsing session, sometimes up to a year
• who sets them: Stripe directly (not us)

these are "strictly necessary" cookies — they are required for the payment to work and are not used for tracking or advertising.

fonts (Google Fonts)

we load our display and handwriting fonts from Google Fonts. when you visit the site, your browser makes a request to Google's servers to fetch the font files.

• what: your IP address is logged by Google as part of the font request
• why: to serve the font files to your browser
• how long: Google retains IP data according to their own policies
• who sees it: Google (not us)

we do not send any personal information to Google. if you prefer, you can block Google Fonts using a browser extension — the site will fall back to system fonts and still work fine.

what we don't do

• no Google Analytics, Facebook pixels, or tracking scripts
• no advertising cookies or behavioural profiling
• no selling or sharing of personal data
• no third-party social media embeds

questions?

if anything here is unclear, or you want to know exactly what data we hold about you, just reach out via the about page.