Privacy

What this covers

This is the shop at shop.metatronmind.com. It is a direct storefront: no account, no newsletter, no analytics, no advertising. This page states what is actually collected when you browse or order, why it is collected, and how to have it removed.

Who we are

Metatron Mind is the trading name of Clifton Morris, an individual, of PO Box 73, New Plymouth, Idaho 83655, United States. Clifton Morris is the data controller for this shop. Contact: [email protected].

What we collect

• Order details — name, email, phone, shipping address, the pieces, sizes and quantities you order, prices, currency, payment status and the order reference.
• Messages you send — email to [email protected] and our replies.
• Technical logs — IP address, user agent, requested address and time, kept for security and operations. Our edge provider (Cloudflare) processes request metadata to deliver the site.
• Your cart — stored in your own browser's local storage. It does not leave your device until you start checkout.

Payment

Card payments are processed by Stripe. Card details go directly from your browser to Stripe and never touch our server; we cannot see them. We receive the payment status, amount, currency and the limited card metadata Stripe exposes — not the full card number. Stripe's own privacy policy applies to the payment page.

Fulfilment

Orders are printed and shipped by our production partner (Tapstitch). We give them what is needed to make and deliver your order: name, shipping address, phone number for delivery, and the items ordered. We do not give them your email for marketing.

Who processes data for us

Cloudflare (edge and tunnel), Stripe (payments), Tapstitch (production and fulfilment), Aliyun OSS (hosting for the product and mockup images), and our email provider. Each receives only what its job needs.

What we do not do

• No analytics, no advertising pixels, no fingerprinting, no A/B testing scripts.
• No account and no newsletter sign-up. The shop itself sets no cookies.
• The only third-party script anywhere on the site is Stripe.js on /checkout, and it exists because a card payment requires it.
• We do not sell your data.

How long we keep it

Order records are kept for accounting, tax, dispute and support periods (typically seven years). Support email is kept as long as needed to resolve the issue. Server logs have a short retention for security and operations. The cart stays in your browser until you clear it.

Your choices

Write to [email protected] to ask for a copy, correction or deletion of your data. We may keep records we are legally required to keep (tax and accounting). In the UK/EU you also have the right to complain to your data protection authority. Nothing here limits your statutory rights.

Children

The shop is not directed at children, and we do not knowingly collect data from children.

Changes

If this policy changes, the effective date above changes. A material change will be noted on this page rather than buried in an email.