Privacy Policy

1. What we collect

• When you buy a card: your name and email address (collected by Stripe at checkout), the card you chose, and the names, message, card language and opening date you add, plus any voice message you record. We never see or store your card number. Payments are handled by Stripe.
• When you join our mailing list or contact us: your email address, and your name and message if you write to us.
• When you browse the site: the pages you view and the buttons and links you click, with the date and time; your approximate location (city, region and country, worked out from your IP address; we don't store the IP address itself); your type of device, operating system and browser; the website or campaign link that brought you here; and the language you use the site in. This is connected to a random ID stored in your browser.
• When someone opens a card you sent: that the card was opened, along with the same browsing information about their visit.

2. How we use it

• To create, deliver and show your cards, take payment and send receipts.
• To reply to your messages and help with your orders.
• To send our newsletter, if you signed up. You can unsubscribe at any time.
• To understand how the shop is used and make it better, for example which cards people look at and which pages work well.
• To prevent fraud, keep the site secure and meet our legal, tax and accounting obligations.
• When you place an order, join our mailing list or contact us, we may link your earlier browsing on that browser to your customer record, so we can see what led to your order.

We don't sell your personal information, we don't share it for cross-context behavioural advertising, and we don't use advertising or third-party tracking cookies.

3. Cookies and browser storage

We use a small number of our own cookies and browser storage. None of them come from advertisers:

• A random visitor ID and session ID (lili_vid, lili-vid, lili-sid) for our own analytics.
• Your language and currency (lang, cur).
• Your bag, and where you first came from (for example a campaign link), saved in your browser.
• A sign-in cookie for the shop owner only (lili_admin).

4. Who we share it with

Only the service providers that run the shop for us, and only what they need to do that:

• Stripe, for payments and receipts.
• Vercel, for hosting the website, storing voice messages and providing approximate location from IP addresses.
• Neon, for our database.

They handle information on our behalf under their own security and privacy commitments. We may also share information if the law requires it, to protect our rights or someone's safety, or as part of selling or transferring our business.

5. Your cards and voice messages

Every Live Card has its own private link that is very hard to guess. Anyone who has the link can open the card, including its message and voice recording, so please share it only with the person it's meant for.

6. How long we keep it

• Orders and the card details on them: for as long as we need to provide your cards, then as long as required for tax and accounting (usually up to 7 years).
• Mailing list: until you unsubscribe.
• Messages to us: as long as needed to help you.
• Browsing (analytics) records: about 13 months, then they are deleted automatically.

7. Your choices and rights

• Turn off analytics for your browser with the switch on this page. We also respect Global Privacy Control: if your browser sends that signal, we don't record your browsing.
• Unsubscribe from our emails with the link in any email, or by writing to us.
• Ask to see, correct or delete your personal information, or for a copy of it, by emailing liliandcostation@gmail.com. We'll reply within 30 days, or sooner if your local law requires. We may need to confirm it's you, and we may keep some information when the law requires it (for example order records for tax).
• Depending on where you live (for example California or another US state, Canada, the UK or the EU), you may have more rights, such as objecting to or limiting some uses of your information, or complaining to your data protection authority. We will never treat you differently for using your rights.

8. Children

Our shop is not meant for children under 13, and we don't knowingly collect their personal information. If you think a child has given us information, email us and we'll delete it.

9. Where your information is kept

We are based in the United States, and our service providers keep information in the United States and other countries. If you use the shop from outside the US (for example from Canada), your information is transferred to and processed in the US.

10. Security

We protect your information with encrypted connections (HTTPS), limited access and trusted providers. No system is perfectly secure, but we work hard to keep your information safe.

11. Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you on the site or by email.

12. Contact us

Lili & Co. Station · liliandcostation@gmail.com