Privacy Policy

If you run a shop here, you are our customer. We decide what we hold about you and this document is our answer to you.

If you bought something from a shop here, the shop is who you dealt with. We hold your details because we run their software, we act on their instructions, and we do not use them for anything of our own.

So a buyer asking to see or delete something should ask the shop. If you cannot reach them, write to us and we will help.

Your email address and a scrambled form of your password, which is not the password and cannot be turned back into it. Your store's name, address, country and currency. The contact address your buyers reply to.

Then everything you put in: your products, your photos, your orders and the notes on them.

From the subscription provider we get whether you are trialing, paying, late or cancelled, and the dates around it. We never see your card number.

The name, email address and delivery address given at checkout, and the order itself: what was bought, at what price, and every change of status since.

An order is stored as a copy rather than as a set of links, so it still says what was actually bought and what was actually paid even after the shop changes a price or takes a product down. That is deliberate, and it is why an order is not edited later.

We do not sell it, we do not rent it, we do not build a profile from it, and we do not use one shop's customers to reach another shop's.

Three, and all three are needed for the thing you asked for to work. One keeps a merchant signed in. One remembers a buyer's basket between pages. One remembers which language you chose to read this in.

There is no advertising cookie, no third-party tracker and no analytics that follows anyone between sites.

Running this at all means other companies hold pieces of it. They are told what they may do with it, which is only what we need them to do.

Vercel serves the site and stores uploaded images. Neon runs the database. Resend sends the order confirmations. DodoPayments handles the subscription and is the only one that sees a card.

An account and a shop are kept while they exist, and for a reasonable while after you close them so a shop closed by accident can come back.

Orders and the record of what happened to them are kept as a permanent log, on purpose. A shop needs to be able to say what it sold and what it was paid, and so do we if anyone ever asks.

So a deletion request removes personal details from where they can be removed, and leaves behind the fact that a transaction happened and what it was worth. We will tell you exactly what stayed.

A copy of what we hold about you, a correction of anything wrong, or its deletion within the limit above. Ask at fernandomonjav@gmail.com and expect an answer within thirty days.

If our answer is not good enough, you can complain to the data protection authority where you live.

Every shop's data is separated inside the database itself rather than by the application remembering to filter, so one shop cannot read another's even if some future line of code asks it to.

Everything travels encrypted, passwords are stored scrambled, and card details never arrive here in the first place.

If something happens that puts your data at risk, we tell you and the authorities as fast as the law requires, and we say what we know rather than what sounds best.

Write to fernandomonjav@gmail.com. A person reads it.