Privacy Policy

1. What we collect

• Account info: the email address and password you sign up with. Passwords are stored as a one-way cryptographic hash — we never store or can see your actual password.
• Order info: what you buy, order totals, and shipping information you provide so we can send you your cards.
• Messages: anything you send us through the Contact page, including the email address you give us there.
• Session cookies: a cookie that keeps you signed in, and — if you're not signed in — an anonymous session cookie so cards you've held stay held between page loads. Neither is used for advertising or tracking across other sites.

2. What we don't do

We don't sell your personal information. We don't run ad-tracking pixels or third-party advertising scripts on this site.

3. Who we share it with

Only the service providers that make the site work: our hosting provider (Vercel), our database provider (Neon), our image storage provider (Cloudflare), and, once live, a payment processor to handle checkout. Each only receives what it needs to do its job.

4. How long we keep it

We keep account and order records as long as your account exists, plus a reasonable period after for our own records (tax and dispute purposes, for example). Contact us if you'd like your account and its data deleted, subject to what we're legally required to retain.

5. Your choices

You can review and update your account email any time from your profile page. To request a copy of your data, or ask us to delete it, reach out via Contact.

6. Children

Value Boxes isn't directed at children under 13, and we don't knowingly collect personal information from them.

7. Changes to this policy

If this policy changes materially, we'll update the date above.

8. Contact

Privacy questions or requests go through our Contact page.