Privacy notice

Data we process

Depending on how you use the shop, we process contact and delivery details, order contents, prices, currency, order and provider references, payment and fulfillment status, customer-service messages, and technical or security information such as request logs and IP addresses.

Payment credentials are collected and handled by Stripe. We do not store full card details in the shop database. The shop database stores order records and product snapshots but does not retain the checkout delivery address. Your browser stores the cart and a limited set of completed-order references in local storage so the cart works and is not cleared twice.

Why we process data

We use personal data to display and maintain the cart, take payment, confirm and fulfill an order, arrange delivery, provide support, handle returns and disputes, prevent abuse, secure the service, keep required business records, and comply with legal obligations.

We process only the data reasonably needed for those purposes. Where applicable law requires consent for a particular use, we ask for it separately.

Service providers and recipients

Stripe provides checkout and payment processing. Printful produces and dispatches goods and shares necessary delivery details with carriers. Vercel hosts the storefront, Neon/Postgres stores operational order records, and Inngest coordinates fulfillment events and retries.

Each provider receives data needed for its role and may process technical, account, or transaction information under its own terms and privacy notice. We may also disclose information when required by law, to protect legal rights, or to professional advisers under appropriate duties of confidentiality.

International processing

Some providers, their affiliates, fulfillment facilities, or carriers may process data outside Switzerland. Where required, we rely on an applicable legal transfer mechanism or contractual and organizational safeguards. Provider locations and subprocessors can change over time.

The operator reviews the processor terms, data-processing terms, current subprocessor lists, relevant processing countries, and transfer safeguards for Stripe, Printful and its carriers, Vercel, Neon/Postgres, Inngest, and the support-email provider. You may request current transfer information using the contact details below.

Security measures

We use measures appropriate to this shop such as HTTPS in transit, restricted production access, separate environment credentials, least-privilege provider tokens, signed webhook verification, limited operational logging, database access controls, dependency and deployment review, and documented incident and credential-rotation procedures. No internet service can guarantee absolute security.

Retention and browser storage

Accounting records are retained for at least 10 years where Swiss bookkeeping law requires it. Other order, transaction, support, fulfillment, fraud-prevention, and security data is kept only as long as reasonably necessary for its purpose, applicable tax or claims periods, another legal duty, or a provider’s documented retention schedule.

The cart and completed-order references stored in your browser remain until they are cleared by the shop logic, your browser settings, or you. The storefront does not currently use advertising trackers or marketing analytics. Stripe and other third-party services may use their own essential cookies or similar technologies when you use their pages.

Your choices and rights

Subject to applicable law, you may ask whether we process your data and request access, correction, deletion, restriction, objection, or portability. Some data must be retained to complete an order, meet legal recordkeeping duties, establish or defend claims, or protect the service.

Send a request to the contact email below. We may need to verify your identity before responding. You may also raise a concern with the Swiss Federal Data Protection and Information Commissioner.