Information we collect
When you create an account, submit a contact form, or place an order, the store may collect your name, email, shipping address, order details, and account credentials. Passwords are stored as one-way hashes rather than readable passwords.
How information is used
Information is used to operate accounts, fulfill and support orders, respond to messages, prevent misuse, maintain store records, and comply with legal obligations. This local build stores data in a SQLite database on the machine running the server.
Payments
This local build does not collect card numbers or PayPal credentials. In production, payment information should be handled directly by the selected payment processor, such as Stripe and PayPal, under their own privacy and security practices.
Retention and security
Keep personal information only as long as reasonably necessary for the purposes above, legal obligations, fraud prevention, tax/accounting records, and dispute resolution. Production deployment should use HTTPS, a strong secret key, secure hosting, backups, access controls, and appropriate database security.
Your privacy rights
Depending on where you live, you may have legal rights to access, correct, delete, or obtain information about personal data. Before launch, add the legal business name, privacy contact address, regional disclosures, cookie/analytics practices, and any required opt-out mechanisms.