Privacy

• We keep what we need to run your account, your orders and the conversations between you and creators.
• No advertising trackers, no third-party analytics, no selling or renting your information.
• Shop stats are counted on Sol Sundries with a random visitor id. We don’t store your IP address or browser details with page views.
• Card details never reach our servers. When live payments are switched on, they are handled by Stripe.

Your account

Email, name, a one-way hash of your password (or the Google or Apple account you linked), an optional username and profile photo, and whether you’ve confirmed your email. Email sign-in links are stored only as a hash and expire.

Orders

Your name, email, delivery address and country, gift options and gift note, the pieces, prices, shipping method and totals, and the order’s status history (paid, shipped, tracking, refunds).

Address book

Addresses you choose to save, including country and which one is your default. You can edit or delete them any time in your account.

Messages

Order messages between you and a creator. They’re checked by an automatic filter that keeps sales on Sol Sundries; a message it flags is held for the founder to review before it’s delivered.

Things you share

Hearts (shown on your public wishlist unless you make it private), follows, reviews, comments, guestbook notes and buyer photos.

Newsletter

If you sign up: your email, where you signed up, the exact wording you agreed to and when. Nothing is emailed from this list yet.

Creator applications and shops

For people applying to sell: the application answers (including name, business, location, email and phone), and for approved creators, their shop details, listings, photos, payouts and shipping profiles. Founder actions on a creator’s shop are written to an audit log.

Emails we would send

Order and account emails are written to an outbox inside Sol Sundries. In this preview nothing is actually sent; if an email provider is connected later, they’d go out through it.

Abuse protection

To slow down spam and sign-in attacks, we briefly record actions (for example “sign-in attempt”) with an account id or IP address. These entries are cleared after about a day.

Badges, invites and perks

Badges you’ve earned and the activity behind them (orders, reviews, comments, hearts, follows and which days you visited), your personal invite code, who joined or ordered through it (creators never see buyers’ emails), store credit and reward codes. Visits through a share link are stored with the random visitor id and a one-way hash of the network, not your IP address. If you add a phone for drop alerts: the number, the exact consent wording you agreed to and when (no texts are sent yet). If you add a birthday: month and day only.

Shop stats

One row per visitor, page and day: the shop or piece, the date and the random visitor id from the ss_vid cookie. Bots and creators viewing their own shop aren’t counted.

All of our cookies are first-party: set by Sol Sundries for Sol Sundries. There are no advertising or cross-site tracking cookies.

Your browser may also remember, for one visit only, whether we’ve shown you the tip about your wishlist.

In this preview, checkout uses a simulated payment and no money moves. When live payments are switched on, card details go straight to Stripe and we keep only the payment references, amounts, fees and refund records. [to decide: link Stripe’s privacy notice and list any other processors, such as the email provider]

• A creator sees what they need to fill your order: your name, delivery address, the pieces and your messages with them. Your email address is not shown to creators.
• The founder can see orders, messages (including held ones) and applications to run and protect the marketplace.
• Public things are public: reviews, comments, guestbook notes, buyer photos, your wishlist unless it’s private, and creator shops.
• We don’t sell or rent personal information. [to decide: wording for legal requests and a future business transfer]

• Edit or delete saved addresses in your address book.
• Make your wishlist private from your account.
• Clear cookies in your browser at any time; you’ll be signed out and your bag will empty.
• Ask for a copy of your information, or for it to be deleted, by writing to hello@solsundries.com. [to decide: response time, what must be kept for tax and order records, and for how long]

[to decide: retention periods for orders, messages, closed accounts and applications] Abuse-protection entries are cleared after about a day. Cookie lifetimes are listed above.

[for counsel: legal entity and address, governing law, children’s age limit, rights under state laws such as California’s, international visitors now that some creators ship abroad, and how we’ll announce changes to this policy]