Privacy policy

Only what you give us, or what a feature needs to work:

• Orders: your name, email, shipping address (or the name for tent pickup), what you bought and what you paid, including any discount code, gift card or sales tax.
• Gift cards you send: the recipient's name and email, your name and your note.
• Newsletter: your email, where you signed up and which polos you're interested in, if you tell us. We only add you if you sign up or tick the box at checkout. Buying alone never adds you.
• Elevation Rewards: your email and first name, and the points you earn and spend. Paid orders made with the same email earn points automatically.
• Back-in-stock alerts: your email and the product and size you asked about, and whether you clicked the email.
• Team order and event requests: your name, email, phone if you give it, and the details you send.
• Ratings: the rating, name and words you send from a rating link, tied to the order it came from. Ratings appear on the site only after we approve them.
• Member Map pins: the first name or initials, town, state, home course and photo you choose to add. No email or address is asked for. Photos have their location data stripped, and pins appear only after we approve them.
• Ask the Dude questions: see below.

Payments are taken on Square's own checkout page. Your card details go straight to Square and never reach our servers. We send Square your email, address and what's in your order, and Square sends us back the name, email and address on the paid order so we can ship it.

We don't sell your information or share it for advertising. It goes only to the services that run the shop for us:

• Square, to take payment.
• Shippo and USPS, to price shipping (your address) and to buy the label and track the package (your name and address).
• Colorado's Department of Revenue public sales tax lookup, for Colorado addresses only, to work out the tax rate. Addresses outside Colorado aren't sent.
• Resend, to send our emails, and Supabase, which stores the shop's data and sends Rewards sign-in codes.
• Vercel, which hosts the website.
• An AI service, when Ask the Dude uses one (see below).

Ask the Dude may send your question to an AI service to write the answer. Before it does, emails, phone numbers, street addresses and order numbers are blanked out. Questions asked to Ask the Dude are stored without personal details so we can improve the answers, and are deleted after 180 days. Please don't type anything private.

Order emails go to every buyer: the receipt, shipping and tracking, pickup, refund or cancellation notices, gift cards, and a request to rate what you bought.

Newsletter emails go only to people who signed up. Every one has an unsubscribe link that works for at least 30 days after the email is sent, and unsubscribing takes effect right away.

This website uses no analytics or advertising cookies. The few small files the site saves in your browser are listed in our Cookie policy. They include two first-party functional cookies: sas-ref, which remembers which event's QR code you came from so your order is credited to that event, and sns_bis, which remembers that you came from one of our back-in-stock emails so we can tell whether that email led to an order.

Square's checkout page, where you pay, sets its own cookies. Our emails use Google Fonts, so when you open one, your mail app may load the fonts from Google.

Gift card codes are stored scrambled. IP addresses are used only to stop abuse (too many tries in a short time); where we keep one, it's scrambled and deleted within a day, except on event requests, where a scrambled copy is kept with the request.

We may show public reviews of the shop from Google and Facebook, with the reviewer's name as shown there.

Order, payment and tax records are kept for 7 years, for tax and accounting.

Newsletter details are kept until you unsubscribe. After that, we keep your email marked as unsubscribed so we don't email you again.

Elevation Rewards account details are kept until you ask us to delete them.

You can unsubscribe from the newsletter at any time with the link in any newsletter email. To see, correct or delete the information we hold about you, email contact@sticksandstonesshop.com. There's no self-serve delete button yet, so we handle these by hand. We'll delete what you ask, except records we must keep for tax purposes.

This site is not directed to children under 13, and we do not knowingly collect their information. If we learn we have, we delete it.

If this policy changes, we'll update it here and change the date at the top. Questions: Email contact@sticksandstonesshop.com or call 803-394-1630.