Privacy Policy

Payments & card data

All card payments are processed by Square, a PCI-compliant payment processor. Card numbers, CVVs, and expiration dates go directly to Square — they never touch our servers, and we never see or store them.

What we collect

• Order details: name, email, shipping address, phone (if you give one), the books you ordered, and — if you choose to answer — how you heard about us.
• Account info (only if you create one): email, password (stored securely hashed), and any saved shipping addresses.
• Wishlist & wants: books you save or ask us to look out for.
• Newsletter signup: your email and optional genre preference, if you subscribe to new-arrival updates.
• Unfinished checkouts: if you type your email into the checkout form but don't complete the order, we store that address alongside the cart so we can remind you your books are waiting.
• Messages: what you send us through the contact form.

How we use it

• To fulfill orders: charging, shipping labels, pickup coordination.
• To send order emails: confirmations, shipping updates with tracking, refund notices, and — a week or so after your order arrives — a single invitation to leave a review.
• To send marketing email only if you opted in (the new-arrivals newsletter); every marketing email has an unsubscribe link that works immediately.
• To send you a single reminder if you left books in your cart without checking out. It has an unsubscribe link, and opting out stops it for good.
• To let you know when a book you asked us to find comes into stock.
• To understand, in aggregate, how the shop is doing.

Cookies

The site sets a small number of cookies that make shopping work:

• a cart cookie, so your cart follows you between pages;
• a wishlist cookie, so hearts stick before you have an account;
• a sign-in cookie, if you have an account;
• a cookie remembering a discount code you applied;
• a short-lived receipt cookie after checkout, so only your browser can see your own order confirmation details.

Google Analytics (below) also sets its own cookies. We don't use any other third-party or advertising cookies.

Analytics

We use Google Analytics to understand how shoppers find and use the site — which pages get visited, which books get viewed, and what gets purchased. Google Analytics sets cookies in your browser and handles that data under Google's privacy policy. Our own visit counter is anonymous: it records where a visit came from (like “Facebook” or “Google”), never who you are, and stores no IP addresses.

What we don't do

• We don't sell or rent your personal data to anyone.
• We don't use your data for advertising outside the shop.
• We don't store card numbers, CVVs, or bank account info.
• We don't knowingly collect information from children under 13 — we sell children's books, but this site is for grown-ups to shop on.

Service providers

We share the minimum necessary information with the providers that actually run the shop: Square (payments), EasyPost / USPS (shipping labels and tracking), Resend (order and marketing emails), Supabase (our database), and Google Analytics (site usage statistics). Each one handles your data under their own privacy terms, and none of them may use it for their own marketing.

Keeping & deleting data

Order records are kept as long as bookkeeping and tax rules require. If you have an account, you can delete it at any time from your account settings — that removes your profile, saved addresses, and saved cards. You can unsubscribe from marketing email with one click at the bottom of any marketing message. For anything else — seeing what we have about you, correcting it, or asking us to delete it — contact us and we'll take care of it. California residents: these same choices are how we honor your privacy rights under California law.

Changes

If our practices change, we'll update this page and the date at the top. Meaningful changes will be visible here before they take effect.

Contact

Questions about your data, requests to delete your account, or anything else privacy-related — please contact us and we'll get back to you.