Privacy policy

Who is responsible

PLA Toys LLC is responsible for the information described here. Questions go to pla.toys.fidget@gmail.com.

What we collect

• Order details: your name, email, shipping address, phone number, and what you bought. Stripe collects these during checkout and we see them in our Stripe dashboard so we can print and ship the order.
• Payment information: handled entirely by Stripe on their own page. Your full card number never reaches our site or our servers. We can see only the last four digits and the card brand on the resulting payment record.
• Your cart: stored in your own browser using localStorage so it survives a refresh. It stays on your device and is not sent to us until you check out. Clearing your browser data clears it.
• Basic technical logs: our host records standard request information such as IP address, browser type, and which pages were requested. This is ordinary server logging used for security and troubleshooting.
• Email you send us: if you write to us, we keep the message so we can answer it and handle any follow-up.

What we do not do

• We do not sell, rent, or trade your information.
• We do not run advertising or analytics trackers, and we do not set marketing cookies.
• We do not send marketing email unless you have asked us to. Order confirmations and receipts are not marketing.

Who else handles your information

Running a store means a few companies necessarily see parts of an order:

• Stripe processes payments and stores order and customer records.
• Vercel hosts the site and processes the requests your browser makes to it.
• USPS and the service we use to buy postage receive the name and address needed to deliver your package.

Each of these has its own privacy policy governing what it does with that information. We may also disclose information where the law requires it.

How long we keep it

Order records stay in Stripe for as long as we need them for bookkeeping, tax, and warranty purposes. Email correspondence is kept while it is useful for supporting you.

Children

This store is intended for adults to buy from. We do not knowingly collect personal information from children under 13. If you believe a child has given us their information, email us and we will delete it. Note that our toys are also not suitable for children under 13 for safety reasons, which is a separate matter covered on the safety page.

Your choices

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, and we will do so unless we are required to keep it for tax or legal reasons. Email us and we will handle it. Depending on where you live you may have additional rights under local law, and we will honor those too.

Security

The site is served over HTTPS, payment card data never touches our systems, and access to the Stripe dashboard is limited to us. No system is perfectly secure, so we do not claim otherwise, but we have deliberately kept the amount of data we hold small.

Changes

If this policy changes in a meaningful way we will update the date at the top of this page.