Privacy Policy

What we collect

When you place an order: name, email, shipping address, phone (optional, for shipping), and payment information. Payment details are processed by Stripe — we never see or store your card number.

When you sign up for the Firelight Council newsletter: just your email.

When you contact us: name, email, and the message you wrote.

When you browse the Site (with consent): see the cookie sections below.

What we use it for

• Fulfilling and shipping your order
• Sending order updates, shipping notifications, and (if you opted in) the newsletter
• Responding to your messages
• Understanding which pieces resonate so we know what to make next
• Finding new collectors via Meta and Instagram ads

We do not sell your information. We do not share your email or contact details with third parties for their marketing.

Who else sees it

We work with a small set of services to run the shop. Each only sees what they need to do their job:

• Stripe — processes payments. They handle card data; we don't.
• Supabase — stores order and customer records (encrypted at rest).
• Cloudflare R2 — stores product images.
• Resend — sends transactional and newsletter emails on our behalf.
• Shippo — generates shipping labels (sees your shipping address).
• Vercel — hosts the website.
• Google Analytics 4 — anonymized usage analytics, only if you accept cookies.
• Meta Pixel + Conversions API — measures ad effectiveness, only if you accept cookies. Server-side Conversions API may share order details with Meta to deduplicate purchase events.

Cookies & tracking

We use three categories of cookies:

Essential

Required for the Site to work — your cart contents, checkout session, login (if you're an admin). These are always on. They do not track you across other sites.

Analytics

Google Analytics 4 (gtag.js). We use this to understand which pages get visited and how people move through the Site. Off by default. Enabled only if you click "Accept" on the consent banner.

Advertising

Meta Pixel + Conversions API. We use this to measure whether our Meta and Instagram ads work, and to find new collectors who'd love these pieces. Off by default. Enabled only if you click "Accept" on the consent banner.

You can change your mind anytime via the Privacy preferences link in the footer.

Your rights

You can ask us to:

• Tell you what information we have about you
• Correct it if it's wrong
• Delete it (subject to legal retention requirements like tax records)
• Opt out of marketing emails (one click in any email; or email us)
• Opt out of analytics + advertising cookies (the consent banner; or the footer link)

To exercise any of these, email hello@everlastingsbyemaline.com.

California residents

If you're in California, you have additional rights under the California Consumer Privacy Act (CCPA / CPRA), including the right to opt out of "selling" or "sharing" of your personal information. We don't sell your information, but Meta Pixel is treated under California law as "sharing" for cross-context behavioral advertising. The cookie consent banner's "Decline" button is your opt-out — clicking it stops Meta Pixel from loading.

We honor the Global Privacy Control (GPC) browser signal where it's set, treating it as a Decline by default.

Everlastings by Emaline is currently below the revenue and consumer-volume thresholds that make a business a "covered business" under CCPA, but we honor these requests as a matter of practice regardless.

Children

The Site is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe we have, please contact us and we'll delete it.

Changes to this policy

We'll update this page when our practices change and note the effective date at the top. For substantive changes, we may also email subscribers.

Contact

Questions? Email hello@everlastingsbyemaline.com.