Privacy

What we collect

When you place an order, we receive your name, email address, and shipping address from Stripe Checkout, along with Stripe's reference numbers for the payment. Payment details (card numbers) go directly to Stripe and never touch our servers. Beyond that we hold whatever you write to us by email, any notes we make while handling your order, and, like every web server, short-lived access logs that include IP addresses. There is nothing else.

Cookies and tracking

This site sets exactly two cookies: one that remembers your cart, and one that keeps the store administrator logged in. There are no analytics, no trackers, no ad pixels, and no third-party scripts.

What we do with it

Order information is used to fulfill your order, respond to support and warranty requests, and keep the records that tax and accounting rules require. We do not sell or rent your information, and we do not send marketing email.

Who else sees it

Five companies handle your information on our behalf, each only for the job named. Stripe processes payments under its own privacy policy. Resend sends our order confirmation and shipping emails, so it handles your name, email address, shipping address, and what you ordered. Cloudflare routes email you send us to our inbox, which is hosted by Google (Gmail), so anything you email us is stored there. The shipping carrier receives your name and address to deliver your order. The store itself runs on our own server, not a hosting company's.

Retention and requests

We keep order records for seven years, which is what tax and accounting rules require of us, and delete them after that. Support email is kept for as long as it is useful for helping you, and no longer than the order it relates to. To ask what we hold about you or request deletion (subject to those records we have to keep), email dev@wunkuslabs.com.

If you are in the UK or the European Union

Wunkus Labs LLC is the data controller for everything described above, and dev@wunkuslabs.com reaches the person responsible for it.

We rely on three lawful bases and nothing else: performing our contract with you, which covers taking, fulfilling, and supporting your order; complying with a legal obligation, which covers the tax and accounting records above; and our legitimate interest in preventing fraud and in defending ourselves if a dispute arises. We never rely on consent, so there is no consent to withdraw, and we do no profiling and no automated decision-making.

Your information is stored and processed in the United States, where we and our payment processor are based. Sending it to us is necessary to perform the contract you enter into when you order.

You have the right to ask for a copy of what we hold, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable form. Email us and we will answer within one month. If we get it wrong you can complain to your national data protection authority, or to the Information Commissioner's Office if you are in the UK, and you do not have to come to us first.