Privacy Policy

• Order details — your name, email, shipping address, phone (for the carrier), and what you bought. Collected by Stripe at checkout and stored so we can make, ship, and support your order.
• Account email — signing in is passwordless; we store your email and a session token so you can see your orders and tracking.
• Messages you send — anything you email through the links on this site arrives in Wendy's inbox so she can reply.
• Cart contents — stored only in your own browser (localStorage), never on our servers, until you check out.

Payments run entirely through Stripe's hosted checkout. Your card number goes straight to Stripe and never touches our servers — we only receive the order summary, your contact/shipping details, and a paid/unpaid status. Stripe's own privacy policy applies to the payment itself.

• miw_session — a secure, httpOnly cookie set only when you sign in with a magic link, so your account stays signed in (30 days). Deleted on sign-out.
• miw_cart_v1 — your cart, kept in your browser's localStorage.
• No advertising cookies, no cross-site trackers, no analytics profiles sold to anyone.

Only the services required to run the store:

• Stripe — payment processing.
• Resend — transactional email (sign-in links, order confirmations, tracking updates).
• Shipping carriers — your name and address, to deliver the parcel.

We never sell or rent your personal information.

Want your data corrected or deleted, or want off the waitlist? Email Wendy from the email on file and we'll take care of it. We keep order records as long as needed for support, accounting, and legal requirements.

The store isn't directed at children under 13, and we don't knowingly collect their data. If you believe a minor submitted personal information, email Wendy and we'll remove it.