DOC: PRIVACY-01

Privacy Policy

Last updated: July 6, 2026

This policy explains what data Estores collects, why, and what we do with it. The short version: we collect the minimum needed to run a store, we never sell your data, and you can ask us to delete it.

01What we collect

We collect only what the store needs to function:

  • Account data: email address, display name, and (if you sign in with Google) the basic profile Google shares.
  • Order data: what you bought, when, and the email the receipt went to.
  • Newsletter signups: the email you enter in the mailing list form.
  • Technical data: anonymous performance and usage metrics (page load times, Web Vitals) via Vercel Speed Insights. These are aggregated and not tied to your identity.

02What we never collect

We do not store card numbers (payments are handled by our payment processor), we do not run third-party advertising trackers, and we do not buy or enrich data about you from anywhere else.

03How we use your data

  • Delivering purchases and keeping your download library available.
  • Sending receipts and important account notices.
  • Sending the newsletter — only if you signed up, and every email has an unsubscribe link.
  • Keeping the store fast and finding bugs, via aggregate metrics.

04Where your data lives

Account and order data is stored in Google Firebase (Firestore and Firebase Authentication). Files are stored in Firebase Storage. The site is hosted on Vercel. Each of these providers maintains their own industry-standard security and compliance programs.

05Cookies

We use only functional cookies and local storage: keeping you signed in and remembering your cart. There are no advertising or cross-site tracking cookies.

06Sharing

We share data only with the service providers needed to operate the store (hosting, payments, email delivery), and only the minimum each needs. We never sell or rent personal data. We disclose data to authorities only when legally required.

07Your rights

You can ask us at any time to:

  • Export a copy of the data we hold about you.
  • Correct inaccurate data.
  • Delete your account and associated personal data.
  • Unsubscribe from the newsletter (or just use the link in any email).

Write to us via the contact page and we will handle it within 30 days.

08Changes to this policy

If this policy changes materially we will announce it on the site. The date at the top always reflects the latest revision.

Questions about this document? Contact us — a human will answer.