Privacy Policy

This policy explains how 2'SSY (“2'SSY,” “we,” “us”) collects, uses, and shares your personal information when you visit 2'SSY, place an order, or join our email list. By using the site you agree to this policy.

Information we collect

Information you give us. When you place an order or create an account, we collect your name, email address, shipping address, and order details. If you create an account, we store a securely hashed version of your password — never the password itself. If you join our email list, we collect your email address and where you signed up.

Information collected automatically. Like most websites, we collect limited technical data (such as device and browser type, and pages viewed) through privacy-friendly, cookieless analytics to understand how the store is used. We do not use cross-site advertising trackers.

Payment information

Card payments are processed by our payment provider, Stripe. Your full card number is entered on Stripe's secure systems and is never stored on or transmitted through our servers — we receive only confirmation of payment and limited details (such as the last four digits) needed to manage your order. Stripe handles your card data under its own privacy policy and PCI-DSS compliance.

How we use your information

We use your information to:

• process, fulfill, and ship your orders;
• send order confirmations, shipping updates, and support replies;
• manage your account and order history;
• send drop alerts and marketing — only if you opted in;
• prevent fraud and keep the store secure; and
• comply with our legal obligations.

We do not sell your personal information.

Who we share it with

We share data only with the service providers that make the store run, and only as needed for them to perform their service:

• Stripe — payment processing;
• ShipStation and shipping carriers (e.g. USPS, UPS, FedEx) — order fulfillment and delivery;
• Resend — transactional and marketing email delivery;
• Vercel (hosting) and Neon (database) — the infrastructure that runs the site and stores order data.

We may also disclose information where required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets. Each provider processes your data under its own privacy terms.

The email list

Joining is opt-in. You can unsubscribe at any time using the link in any marketing email or by emailing us. We keep your address until you ask us to remove it. See Join the list for what you get. Order-related emails (confirmations, shipping) are not marketing and are sent regardless.

Cookies & tracking

We use essential cookies to run the cart and checkout and to remember your display preferences. Our analytics are privacy-friendly and do not set cross-site tracking cookies. We do not run third-party advertising cookies.

Data retention

We keep order and account information for as long as needed to provide the service and to meet legal, tax, and accounting requirements, after which it is deleted or anonymized. Email-list data is kept until you unsubscribe or ask us to delete it.

How we protect it

The site runs over encrypted HTTPS connections, passwords are stored only as salted hashes, and card data is handled entirely by Stripe. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

Your choices & rights

You can ask us to access, correct, or delete your personal information, or to stop sending you marketing emails, at any time. Depending on where you live, you may have additional rights:

• EEA/UK (GDPR): rights to access, rectify, erase, restrict, port, and object to processing, and to lodge a complaint with your local data-protection authority.
• California (CCPA/CPRA):rights to know, delete, and correct your information, and to opt out of “sales” or “sharing” — which we do not do.

To exercise any right, email hello@2ssy.shop. We will not discriminate against you for exercising your rights.

International visitors

We operate in the United States and our service providers may process your data there. If you order from outside the U.S., you understand your information will be transferred to and processed in the U.S.

Children's privacy

2'SSY is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The version posted here, with its “last updated” date, is always the current one. Material changes will be highlighted on this page.

Contact

Questions about your data or this policy? Email support@2ssy.shop.