Privacy Policy

We use collected information to:

• Send weekly newsletter (Melt Sheet) to subscribers
• Process and fulfill shop orders
• Send drop notifications and restock alerts
• Respond to contact form inquiries
• Improve website performance and user experience
• Analyze traffic patterns and popular content
• Prevent fraud and abuse

We do NOT: Sell your data, share your email with third parties for marketing, or track you across other websites.

We use the following third-party services:

• Email service provider (e.g., Klaviyo, ConvertKit) — stores subscriber emails, sends newsletters
• Payment processor (e.g., Stripe, Shopify Payments) — processes payments securely (we do not store credit card info)
• Hosting provider (e.g., Vercel) — hosts website and stores server logs
• Analytics (privacy-focused) — tracks site usage without personal data
• Etsy— if you purchase via Etsy, their privacy policy applies

These services have their own privacy policies. We choose vendors with strong privacy commitments.

• Newsletter subscribers: retained until you unsubscribe
• Order information: retained for 7 years (tax/legal requirements)
• Contact form messages: retained for 2 years
• Analytics data: aggregated, anonymized, retained indefinitely

You have the right to:

• Access: Request a copy of data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (with exceptions for legal obligations)
• Unsubscribe: Opt out of newsletter anytime (link in every email)
• Portability: Request your data in machine-readable format

To exercise these rights, contact us via the contact page.

We use industry-standard security measures: HTTPS encryption, secure payment processing, password hashing, and regular security audits. However, no system is 100% secure. We cannot guarantee absolute security but take all reasonable precautions.

Our site is not directed at children under 13. We do not knowingly collect information from children. If you believe we have collected information from a child, contact us immediately and we will delete it.

Our servers are located in the United States. If you are accessing from outside the US, your data will be transferred to and stored in the US. By using our site, you consent to this transfer. We comply with GDPR for EU users and provide equivalent protections to all users worldwide.

We may update this policy from time to time. Material changes will be announced via newsletter and on this page. Continued use of the site after changes constitutes acceptance.