Privacy Policy

Information we collect

• Account information. When you sign in, authentication is handled by Auth0. Depending on how you sign in, we receive your name, email address, and profile picture (for Google sign-in) or a passkey-based credential (for passkey sign-in). We do not receive or store your Google password or passkey private key.
• Order and payment information. Payments are processed by Stripe. We store the resulting order record (items, quantity, total, and order status), but Stripe — not us — handles and stores your payment card details.
• Shipping address.When you order a physical item, Stripe Checkout collects the recipient's name and delivery address, and we store them on the order record so the order can be printed, shipped, and supported afterwards. We ship within the United States only, so this is a U.S. address.
• Cart and session data. We use cookies and local session identifiers to keep track of your shopping cart and keep you signed in between visits.
• Agent/API access. If you shop through a connected shopping assistant or agent (for example, via our Universal Commerce Protocol or MCP endpoints), that agent acts on your behalf using the same account and order information described above.

How we use this information

We use the information above to:

• Create and secure your account, and let you sign in.
• Process orders, payments, and provide order history and support.
• Have physical orders printed and shipped to you, and handle replacements, refunds, and delivery problems afterwards.
• Keep your cart and preferences consistent across visits and devices.
• Detect, prevent, and respond to fraud, abuse, and security issues.
• Comply with legal obligations.

We do not sell your personal information, and we do not use your information to serve third-party advertising.

Who we share information with

We share information only with the service providers that help us run the Site, specifically:

• Auth0 — authentication and identity.
• Stripe — payment processing.
• Printful— our print-on-demand provider, which prints physical orders and ships them directly to you. When you buy a physical item, they receive the recipient's name and shipping address, what was ordered, and your email address so they can send you shipment and tracking notifications. They do not receive your payment details, which stay with Stripe, or your account and sign-in information.
• Google — if you choose to sign in with your Google account.
• Our cloud hosting provider, to run the Site itself.

Each provider receives only what it needs to do its job, and may use it only to provide that service to us — not for their own purposes. Apart from the providers listed above, we do not share your information with any third party except where required by law.

Data retention

We retain account and order information — including the recipient name and shipping address on a physical order — for as long as your account is active, and after that for as long as we need it to handle replacements, refunds, and delivery problems, and to meet our legal, tax, and accounting obligations. You can request deletion of your account at any time by contacting us (see below); we may still have to keep the underlying order records.

Your choices

You can review or update your account information at any time while signed in, or ask us to access, correct, or delete your personal information by contacting us using the details below.

Children's privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above.

Contact us

Questions about this Privacy Policy or your personal information? Contact us at support@byteandsticker.com, or see our Contact page.