Privacy Policy

Payments & card data

All card payments are processed by Square, a PCI-compliant payment processor. Card numbers, CVVs, and expiration dates go directly to Square — they never touch our servers, and we never see or store them.

What we collect

• Order details: name, email, shipping address, phone (if you give one), and the books you ordered.
• Account info (only if you create one): email, password (hashed), and saved shipping addresses.
• Wishlist & wants: books you save or ask us to look out for.

What we don't do

• We don't sell or rent your personal data to anyone.
• We don't use your data for advertising outside the shop.
• We don't store card numbers, CVVs, or bank account info.

Service providers

We share the minimum necessary information with the providers that actually run the shop: Square (payments), EasyPost / USPS (shipping labels and tracking), Resend (order confirmation emails), and Supabase (our database). Each one handles your data under their own privacy terms.

Contact

Questions about your data, requests to delete your account, or anything else privacy-related — please contact us and we'll get back to you.