Effective October 26, 2026
This policy describes how Things by Theodore LLC handles personal information for the theodore.net website and store and the Avian Visitors frame services at avianvisitors.com.
What we collect
Orders require your name, email address, billing address, and shipping address. Checkout is guest-only; the store does not create accounts. If you join a waitlist or newsletter, we collect your email address and the list tags used to send the updates you requested.
We also collect basic site and checkout activity: pages viewed, store actions, referral source, approximate location, device and browser information, a random first-party visitor identifier, and a per-tab session identifier. Checkout-funnel events do not include your email address, but the visitor identifier and referral source are saved with payment records to link store activity to orders. Hosting and security providers also process IP addresses.
Stripe processes card payments. Your card details go directly to Stripe; we do not see or store your card number. See Stripe's privacy policy.
Frame registration collects your email, frame identifier and name, source and display settings, and device diagnostics such as battery readings, firmware version, and connection timing. Settings may include a ZIP code, BirdWeather station ID, or custom source address. We use these records to prepare collages, manage frames through emailed sign-in links, and provide support.
How we share
We use these providers to operate the site, fulfill orders, and run the frame services:
- EasyPost. Delivery addresses and shipment details are used for address checks, labels, and tracking.
- Shipping carriers. Your name, address, and shipment details go to the carrier used to deliver your package. For orders shipped outside the US, the destination's customs authority also receives them, with the order contents and value.
- Cloudflare. Cloudflare hosts our site, store functions, analytics endpoint, frame services, and their records. See Cloudflare's privacy policy.
- Stripe. Stripe processes payments, taxes, and order records. See Stripe's privacy policy.
- Buttondown. Buttondown stores waitlist and newsletter subscriptions and sends those messages. Store signups include your public IP address for abuse prevention. See Buttondown's privacy policy.
- Resend. Resend delivers order and shipping emails and frame sign-in links. See Resend's privacy policy.
- Google Analytics. Google processes site-usage and shopping-event data as described below.
- BirdWeather and Zippopotam.us. Selected postal areas or station IDs are used to find bird detections. Custom sources receive requests at the address you provide.
We do not sell personal information or use waitlist email addresses for unrelated purposes.
Cookies, analytics, and Do Not Track
Local storage and session storage hold a random first-party visitor identifier, a per-tab visit identifier, referral attribution, cart state, and navigation state.
Google Analytics collects standard usage data, including pages viewed, approximate location, and device and browser information. This data uses identifiers; first-party store identifiers can be linked to orders as described above. Google and the other providers listed above may collect information when you use the site. See Google's privacy policy.
You can opt out with Google's browser add-on or block cookies and site storage in your browser. We do not respond to Do Not Track signals.
External fonts, icons, scripts, images and embeds can send connection information to their providers, including Google Fonts, Font Awesome, jsDelivr and GitHub. Giscus comments are public GitHub Discussions.
How long we keep your data
- Order records. Seven years for tax compliance
- Server logs. 60 days
- Waitlist and newsletter records. Until you unsubscribe or request deletion, except for the minimal suppression record needed to honor an unsubscribe
Your choices
You can update settings or release a frame on its management page. Releasing a frame does not delete order records or newsletter subscriptions. To access, correct, or delete your information, email [email protected].
If you live in the UK, you may also object to our use of your information and complain to the Information Commissioner's Office. We use order details to fill your order and keep the records tax law requires, and site data for our legitimate interest in running the store. Our providers process your information in the US.
Changes
Updates to this policy will be posted here with a new effective date. Material changes will be noted at the top of the page.
Contact
Privacy questions: [email protected]