Privacy

What we keep

Your email, so you can sign in with a link (we don’t use passwords).

What you add to your profile: name, username, photo and bio, if you fill them in.

What you do on the site: your posts and comments, the practices you save or mark as done, and the workshops you sign up for.

If you buy: shipping name and address, email, the pieces, the engraving text and the gift message. Card details are handled by Stripe and never reach us.

If you subscribe to the letters: your email and the date you confirmed it.

Who helps us keep it

Supabase (database, files and sign-in), with the data on servers in the European Union.

Vercel (hosts the site), Stripe (payments) and Resend (sends the emails).

Your rights

From My corner → Settings you can download all your data and delete your account. Deleting it removes your profile, your posts and what you saved; orders are kept, because the law requires keeping sales records.

The weekly digest and the letters only reach you if you turn them on. Reply notifications come on by default; you can turn them off in Settings.

Controller and contact

[PENDING: data controller, contact details, legal basis for each use, retention periods and the right to complain to the AEPD. Legal review, docs/08 question 23.]