Privacy

We keep what we need to deliver a box and nothing else.

• —Card details never touch our servers.
• —Recipient addresses are stored to ship the box, and are visible only to the operator and the sender.
• —Opt-outs are stored as a salted hash, never as a readable address.
• —Analytics are cookieless. There is no banner because there is nothing to consent to.

TODO — this is a plain-language summary, not a reviewed privacy policy.