Privacy policy

Draft notice — the full business privacy policy is pending review and publication before orders open.

This storefront stores cart quantities and fulfillment preference in your browser. Checkout contact details are not saved in browser storage. To enforce stock and one-medal-per-email limits, the server stores a hash of your normalized checkout email, a checkout session reference, and reservation/payment state. It also stores an order reference, total, fulfillment status, a hashed pickup-pass token, and fulfillment audit timestamps. It does not save your name, address, or card details in its database. Stripe processes and retains contact, shipping, and payment information; the authorized fulfillment team can securely view the contact and delivery details needed to fulfill your order. Card details are entered on Stripe-hosted checkout, not on this website.

First-party aggregate analytics count page views and, on the home and product pages, selected shopping-button clicks, grouped by page category and day. These counters do not use cookies or visitor identifiers and do not store names, emails, order or session references, IP addresses, or raw referrers. Supported Do Not Track and Global Privacy Control signals skip browser event counting. Repeated activity can count again; these are not unique-visitor counts.

For privacy questions or requests, DM @coffeeruncollective on Instagram. The full retention policy remains under review.