Privacy Policy

Effective , the date this version of the site was published.

TidySteps ("we", "us") operates this site at tidysteps.pages.dev. The short version: we collect what a pre-order needs and nothing else, two named companies process it for us, we run no analytics and no advertising pixels, and we never sell or share your information.

1. What we collect

When you place a deposit

Payment happens on a page hosted by Stripe, our payment processor. On that page Stripe collects, and we receive from Stripe:

Stripe also collects your card details and your name as it appears on the card. We never see or store the card number; Stripe gives us a payment record, not the card.

When you send the pre-order form

Our server writes one log line with the situation and deposit option you chose and the version of the site you used. It holds no name, email or IP address, sets no cookie and reads no cookie, and is not joined to your order. Cloudflare, which hosts the site, handles your IP address and browser request headers to deliver every page and to block abuse, under its own policy linked below.

When you write to us

We keep the message you send and our reply so we can answer you and handle your order.

2. What we do not collect at deposit

3. How we use it

We do not use your information for advertising, profiling or automated decisions about you.

4. Who processes it

Exactly 2 companies handle your information on our behalf. Each is named below with what it does; we add a name here before a new processor ever runs, not after.

Processors running on this site
ProcessorWhat it handles
Stripepayment, receipt email, billing address, custom field answers
Cloudflarehosting and request handling

Stripe's policy: stripe.com/privacy. Cloudflare's policy: cloudflare.com/privacypolicy.

We do not sell your personal information and we do not share it for advertising. We disclose it only to the processors above, to a carrier at shipment, or when the law requires.

5. Cookies, tracking and Do Not Track

Our pages run no scripts at all, so there is no analytics beacon, no advertising pixel and no session replay. We set no cookies. The only other site you are sent to is Stripe's checkout page, which runs under Stripe's own policy.

Do Not Track

We do not track visitors across sites, so we do not change anything in response to a Do Not Track or Global Privacy Control signal: there is nothing to turn off.

Other parties

No other party collects personal information about your online activities over time or across other websites through this site.

6. How long we keep it

If you cancel before shipment, we keep the refund record because the law requires it, and nothing else.

7. Security

Every page and every request uses HTTPS. Card details go to Stripe directly and never touch our systems. Access to order records is limited to the people who fulfill orders and answer support. No system is perfectly secure; if a breach ever affects your information we tell you as the law requires.

8. Your rights and how to ask

Whoever you are and wherever you live, you can ask to see, correct or delete what you sent us. Ask through the contact details shown at checkout, or through your pre-order confirmation email, which carries the same support contact. We answer within 30 days. Deleting an order record before a refund has settled is not possible, and some records must be kept for tax and accounting law; we tell you which and why.

9. California privacy rights

If you live in California, you have the right to know what personal information we hold about you and how we use it, to correct it, to delete it, and to confirm that we do not sell or share it. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use sensitive personal information for any purpose beyond completing your order. We honor these requests for everyone, not only California residents, and we never treat you differently for making one. To make a request, use the contact details shown at checkout or your pre-order confirmation email, and put "Privacy request" in the subject line. An authorized agent may make a request on your behalf; we confirm it with you before acting.

10. Children

This site is not directed to anyone under 18 and we do not knowingly collect information from anyone under 18. If you believe a minor has placed a deposit, tell us and we refund it and delete the record.

11. Changes to this policy

We may update this policy. Changes are posted on this page with a new effective date at the top. If a change affects an open order, we email the address on the order before the change takes effect.

12. Contact

Reach us through the contact details shown at checkout. If you have placed a pre-order, your confirmation email carries the same support contact, and a privacy request sent there is handled the same way.