Privacy Policy

What we collect

• Your name, email address, delivery address, and phone number if you give us one.
• Your orders: what you bought, when, the delivery window, and any delivery notes you write.
• Delivery photos taken by the driver at drop-off, which may show your door, porch, or hallway.
• Messages you send us through the contact page or to Vega, our on-site assistant.
• Your account password, stored only as a cryptographic hash — we can't read it.
• Your email address and first name if you join our email list, along with the fact that you ticked the consent box. We only email an address that was given to us with that tick.
• When you place an order, your IP address and browser type, saved with that order and used only to tell the advertising services which ad led to it. If you've opted out, we don't collect them at all.

We never see or store your full card number. Card details go directly to Stripe, our payment processor, and we only receive confirmation that a payment succeeded.

Why we hold your address

Beyond delivering to it, we store a simplified version of your address to enforce our one-welcome-offer-per-address rule. That's how we tell a genuine new customer from a repeat claim. It's used for that check and for delivery, not for profiling you.

Who we share it with

Only the services that make the business run, and only the data each one needs:

• Stripe — payments, refunds, and subscription billing.
• Resend — order confirmations, delivery notices, and password resets.
• Anthropic — powers Vega, our assistant. What you type to Vega is sent to Anthropic to generate a reply, so please don't put payment details or anything sensitive in that chat.
• Convex — the database where your account and orders are stored.
• Vercel — hosting for the website itself.
• Meta (Facebook and Instagram) and Google — advertising and measurement. Their tags tell us which ads led to a visit or an order. They receive pages viewed, products viewed or added to the cart, and the value of a completed order — never your payment details. When you place an order, the Meta tag also receives your email, name, phone, city and ZIP so Meta can tell that the person who saw an ad is the person who bought. Your browser scrambles (hashes) each of these before it is sent, so Meta never receives them in readable form.
• Meta also receives a confirmation from our server when an order is paid, so a purchase still counts if your browser blocked the tag. That message includes your email address, name, city and ZIP in scrambled (hashed) form — Meta can compare a hash against accounts it already has, but cannot read the original out of it — along with your IP address and browser type, which help it recognise the same visit. Subscriptions send one per renewal. We send nothing at all for anyone who has opted out.
• Our delivery drivers see the name, address, delivery notes, and order contents for the stops on their route.

We may also disclose information if the law requires it. We do not sell personal information for money. Because the Meta and Google advertising tags described above pass browsing activity to those companies, some state privacy laws treat that as “sharing for cross-context behavioural advertising”, and we honour opt-outs of it — see “Your choices” below.

What we store in your browser

We use your browser's local storage to remember your cart, your language preference, whether you've seen the welcome popup, and whether you've ordered before. Signing in also stores a session so you stay logged in. Clearing your browser data clears all of it.

Separately, the Meta and Google advertising tags set their own cookies. Those cookies can recognise your browser on other websites, which is how we learn that an ad we ran led to an order. The cookies themselves carry browsing and purchase-value information, never your card details. The identifying details described above are not kept in these cookies — they are sent only when you place an order, and only in scrambled (hashed) form.

How long we keep it

We keep order records for as long as we need them for accounting, tax, and warranty purposes. Account details are kept while your account is open. Ask us to close your account and we'll delete what we're not legally required to retain.

Your choices

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Contact us through our contact page and we'll respond. Depending on where you live, you may have additional rights under your state's privacy law; we apply these choices to everyone regardless.

To leave the email list, reply "unsubscribe" to any of our emails, or ask us through our contact page — we remove you and keep a note that you asked, so a later signup form can't quietly put you back.

To opt out of the advertising tags, turn on Global Privacy Control in your browser (Firefox, Brave, and DuckDuckGo have it built in; Chrome and Safari support it through an extension). We check for that signal on every page and load no advertising tag when it's present — nothing to fill in, and it works before the first page finishes loading. If you place an order with it on, the opt-out is recorded with the order, so the server-side confirmation to Meta is skipped as well. You can also ask us directly through our contact page.

Children

This site isn't intended for children under 13, and we don't knowingly collect their information. If you believe a child has given us personal information, contact us and we'll remove it.

Changes

If we change how we handle your information, we'll update this page and the date at the top.