Privacy Policy

Information we collect

You give us directly:

• Account details through our auth provider: email, name, and optionally a phone number.
• Shipping and billing address when you place an order.
• Email address when you opt in to our newsletter or other marketing.
• Anything you send us by email or support request.

Collected automatically:

• Basic usage data through our own first-party analytics (pages viewed, approximate region, device type). We do not run Google Analytics, Meta Pixel, or similar third-party trackers.
• Cookies and similar storage. See our Cookie Policy for the full breakdown.

Payment data:

• Payments run through Stripe Checkout. Your card number never touches our servers; Stripe handles it directly. We receive a confirmation and limited details (last four digits, card brand) for order records.

How we use your information

• Fulfill and ship your orders, and send transactional email (receipts, shipping updates).
• Provide and secure your account.
• Send marketing email only if you explicitly opt in. You can unsubscribe at any time using the link in any marketing message.
• Respond to support requests.
• Understand site usage in aggregate so we can improve the product.
• Meet legal, tax, and accounting obligations.

Who we share it with

We share data with service providers strictly so they can perform work on our behalf:

• Stripe for payment processing.
• Clerk for authentication.
• Twilio SendGrid for transactional and marketing email.
• Neon (PostgreSQL, hosted in the US) as our database.
• Vercel for hosting.
• Uploadthing for image uploads.
• Shipping carriers to deliver your order.

These providers are bound to use your data only for the services they provide to us. We may also disclose information if required by law or to protect our rights.

We don't sell your data

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising. Under the CCPA, that means there is nothing for you to opt out of on the “sale” front. If that ever changes, we will update this policy and add a clear opt-out before doing so.

Data retention

We keep order and account records as long as your account is active and as long as we need them for legal, tax, and accounting purposes (financial records are typically kept for several years). Marketing contact data is kept until you unsubscribe. You can ask us to delete your account data at any time, subject to records we are legally required to retain.

Your rights

Depending on where you live (for example, under GDPR in the EU/UK or CCPA in California), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Opt out of marketing.
• Request a copy of your data in a portable format.

To exercise any of these, email support@traildek.com. We will verify your request and respond within the timeframe required by applicable law.

International users

We currently serve customers in the United States, and our data is stored in the US. If you access the site from outside the US, you are transferring your data to the US, which may have different data-protection rules than your home country.

Children

The site is not directed at children under 13, and we do not knowingly collect their data.

Accessibility

We are committed to keeping traildek.com usable for everyone and aim to meet WCAG 2.1 AA. If you run into an accessibility barrier, email support@traildek.com and we will work to fix it.

Changes to this policy

We may update this policy. When we do, we will revise the “Last updated” date above and, for material changes, give notice through the site or email.