Effective August 31, 2026
This policy describes how the theodore.net store collects, uses, and shares personal information, and the choices available to you. It is intended to comply with the California Online Privacy Protection Act (CalOPPA).
What we collect
Orders require your name, email address, billing address, and shipping address. Checkout is guest-only; the store does not create accounts. If you join a waitlist or newsletter, we collect your email address and the list tags used to send the updates you requested.
We also collect basic site and checkout activity: pages viewed, store actions, referral source, approximate location, device and browser information, a random first-party visitor identifier, and a per-tab session identifier. Checkout-funnel events do not include your email address.
Stripe processes card payments. Your card details go directly to Stripe; we do not see or store your card number. See Stripe's privacy policy.
How we share
We share information only with the providers needed to operate the site and fulfill orders:
- Shipping carriers. Your name, address, and shipment details go to the carrier used to deliver your package.
- Cloudflare. Our site, store functions, security controls, and first-party funnel endpoint run on Cloudflare. See Cloudflare's privacy policy.
- Stripe. Stripe processes payments, taxes, and order records. See Stripe's privacy policy.
- Buttondown. Buttondown stores waitlist and newsletter subscriptions and sends those messages. See Buttondown's privacy policy.
- Resend. Resend delivers transactional messages such as order and shipping emails. See Resend's privacy policy.
- Google Analytics. Google processes standard site-usage data as described below.
We do not sell personal information or use waitlist email addresses for unrelated purposes.
Cookies, analytics, and Do Not Track
Local storage and session storage hold a random first-party visitor identifier, a per-tab visit identifier, referral attribution, cart state, and navigation state.
Google Analytics collects standard usage data, including pages viewed, approximate location, and device and browser information. This data is associated with an identifier, not your name. Google and the other providers listed above may collect information when you use the site. See Google's privacy policy.
You can opt out with Google's browser add-on or block cookies and site storage in your browser. We do not respond to Do Not Track signals because there is no agreed technical standard for them.
How long we keep your data
- Order records. Seven years for tax compliance
- Server logs. 60 days
- Waitlist and newsletter records. Until you unsubscribe or request deletion, except for the minimal suppression record needed to honor an unsubscribe
Your choices
To access, correct, or delete your information, email [email protected].
Changes
Updates to this policy will be posted here with a new effective date. Material changes will be noted at the top of the page.
Contact
Privacy questions: [email protected]