Privacy

What we hold

An account is an email address, a password we never store in readable form, and any delivery addresses you have saved. An order holds what you ordered, where it was going, and the identifying scraps of a card described in the payments policy.

Images you upload are covered by the photos policy, which is the one worth reading if you are here about a face.

We record what you do on this site

This is a prototype, and we record how it is used in order to study it. That means more than counting pages: we record the pages you visit, the buttons and links you click, the options you choose, the files you select, the forms you submit, and what you type into ordinary fields, including search terms, names, addresses and email addresses.

If you are signed in, that record is linked to your account. Until 24 August 2026 it was not, and this page said so. It has been corrected.

An order also records which visit it was placed in, so that we can tell our own testing apart from a real sale. Until 31 August 2026 it did not, and this page said we did not connect the two. That has changed, and this sentence is the correction.

Two things we never record

Card details and passwords are never recorded, not even in part. Your card number, security code, expiry and the name on the card are refused in your browser before they are sent anywhere, and refused a second time on our side in case your browser is running an old copy of our code. Password boxes are treated exactly the same way.

We also do not record any of the following:

• IP addresses.
• Browser and device strings.
• The path or query of the page you arrived from. A referring link is reduced to a bare host name and nothing else.

Visits, and the token that joins them up

A visit ends after half an hour of quiet, or when you arrive again from a different advertisement. Each visit is counted separately.

Your browser also carries a second token, in the same cookie, that lasts longer than one visit. It lets us see that somebody who followed an advertisement last week came back this week, which is the only way we can tell whether advertising this shop is worth doing. Until 25 August 2026 there was no such token and this page said we had deliberately not made one; the operator decided the question was worth answering, and this page now says what is actually true.

It is a random number in our own cookie. It is not built from anything about your device, it is not shared with anyone, and clearing your cookies ends it. Signing out ends it too.

Where you came from

A link to this shop can carry tags saying where it was published: a newsletter, a post, an advertisement. They can also say which advertisement, in which campaign, in which placement. We record those tags when you arrive, so we can tell which ones people actually follow. They are labels the advertiser wrote into the link, not anything about you.

We record them once, when your visit starts, along with the page you landed on and the bare name of the site that sent you. Coming back later from somewhere else does not overwrite what we recorded the first time.

Those tags are the only part of the address bar we keep. The rest of a web address can say what you were searching for or reading, and we do not record it, here or from the page that sent you. We also refuse any tag that looks like a password, a sign-in code, an email address or a telephone number, whatever it is called and whoever put it there.

How long we keep it

The record of what you did is kept for 90 days and then the day's file is deleted. Your account, your addresses and your orders are kept until you ask us to delete them.

Who sees it

The people running this shop, on a screen that requires a workshop login. It is not open to customers and not open to anyone who happens to find the address.

Nobody outside it. There is no advertising network, no analytics service, no third-party script and no tracking pixel on this site. The recording described above is our own code writing to our own disk. When a real payment processor and a real courier arrive, they will need what they need to charge a card and deliver a parcel, and this page will say so before it happens rather than after.

Asking us to delete it

Ask, and we delete your account, your addresses, your uploads, the models built from them, and the record of what you did here. Orders are kept as records of what was promised, with the personal detail removed.