privacy

What I collect: your email and name (if you give it), your order history, your country (for VAT). Stripe collects payment details; I never see your card number.

Why: to send you what you bought, to answer your questions, and – if you ticked the box – to send the occasional new craft.

Where: Supabase (EU region) for orders and emails, Stripe for payments, Resend for sending email. Nobody else.

How long: order data 6 years (bookkeeping law), newsletter until you unsubscribe.

Your rights: see, correct or delete your data – email hello@ohheysanna.com. Unsubscribe link in every newsletter.

Cookies: only what's needed to make the shop work. No ad tracking. If analytics are added, it's privacy-friendly (Plausible or similar) with no cookies.