Privacy Policy

The short version

• We collect your email address and your shipping address, so that we can send you a parcel.
• Payment is handled entirely by Stripe. We never see your card number.
• We count page views using a cookieless analytics tool. It tells us that a page was visited, not who visited it, and it does not follow you to other sites.
• There is no advertising here, and no advertising tracker.
• This site sets no cookies. That is why you have not been asked to accept any.
• We do not sell your information.

What we collect, and when

While you browse, nothing that identifies you. There is no account to create, nothing to sign in to, and no visitor log with your name on it. Page views are counted, and “Counting visits” below says exactly how.

When you check out, Stripe collects your email address, your shipping address, and your payment details on its own hosted pages. Stripe passes us your email address, your shipping address, and what you ordered, so that we can pack it and post it.

If you order a custom bundle, the preferences you type (genres, spice level, anything you would rather avoid, and books you have read recently) travel with your order so the book can be chosen for you.

Your cart stays on your device

Your cart is stored in your own browser. It holds which bundles you picked and how many, plus the preferences you typed for any custom bundle, but never any prices. It is not sent to us, and does not leave your device, until the moment you check out. Clearing your browser data clears your cart.

Counting visits

We use Vercel Web Analytics, run by the company that hosts this site, to count how many people visit and which pages they read. It is how we know whether anyone is finding the shop.

It sets no cookies, so there is nothing here for you to consent to. It records the page visited and general details your browser sends anyway: roughly where in the world the request came from, and what kind of device it is. It does not record your name, your email, or anything you type, it does not build a profile of you, and it cannot follow you to any other website.

Vercel describes what it collects in Vercel’s privacy policy.

Payment

Every payment runs through Stripe Checkout, on Stripe’s own pages. Card numbers are never sent to this site and are never stored on our servers. Stripe processes that information as described in Stripe’s privacy policy.

What we do with it

Your email address is used to confirm your order and to reply if you write to us. Your postal address is used to send your parcel. If you sign up for our mailing list, your email address is also used to send you occasional news from the shop; every email has a link to unsubscribe. We never add anyone to the list who did not sign up for it, and placing an order does not sign you up.

Who else sees it

• Stripe, which takes the payment and holds the order record.
• Square, which takes payment at our market stall. If you claim an in-person exchange, we look up the email you give us there to find your sale.
• Whichever carrier delivers your parcel, which needs your name and address to do that.
• Vercel, which hosts this site and counts page views. It never sees your order or your address.
• Resend, which delivers our emails and, if you signed up, holds the mailing list.
• Nobody else. We do not sell, rent, or trade your information.

We would disclose information if the law required us to.

How long we keep it

Order records live in Stripe for as long as we are required to keep business and tax records. We do not run a separate customer database, so there is no second copy sitting somewhere.

The one exception is an in-person exchange: if you claim one through Exchange a book, we hold the postal and email address for it only for as long as the exchange takes, and delete them once it is finished.

Your choices

Write to contact@tropesandlore.com and we will tell you what we hold about you, correct it, or delete what we are not legally required to keep. An order record we still need for tax purposes is the one thing we may have to decline to delete, and we will tell you plainly if that is the case.

Children

This shop is not directed at children under 13, and we do not knowingly collect their information.

Changes to this policy

If this policy changes, the date at the top changes with it. Everything that observes a visit is named above, and if we ever add anything else (a cookie, an advertising tracker, anything that follows you off this site), this page will say so before it goes live.

Contact

Questions about this policy: contact@tropesandlore.com.