Privacy

The Short Version

We keep what it takes to send you your order and answer your mail. We do not sell it, we do not run ads, and the site carries no tracking or analytics scripts. Payments happen on Stripe's checkout page, so we never see your card number.

What We Keep

• When you order: your name, email, phone, shipping address, what you bought, what you paid, how it shipped, and its tracking number. Stripe passes these to us after you pay, or you type them on our page when a gift card covers the whole order.
• While a checkout is open: the internet address your visit came from, so one visitor cannot hold every piece in the store. It is wiped when the order is paid or the checkout closes.
• When you write to us: the name, email, order number, and message you send through the Contact page.
• When you buy a gift card: the name and email of the person it is for, your name as the sender, your note, and the card's code and balance. Each time a card is spent, we keep which order it paid toward and how much.
• When you join the list: your email, when you joined, and which form you used.

The One Cookie

The site sets one cookie, named stixstones. It holds your bag, a gift card you typed in (by its number in our records and a check value made from it, never its code), a random number that lets only your browser see your order's thank-you page, our record numbers for orders this browser placed lately (so a bought piece never stays in your bag), the day you last visited, and a token that keeps forms from being sent by other sites. Until something is in your bag or you start a checkout (buying a gift card counts), it lasts until you close the browser; after that, 30 days from your last visit. There are no advertising or tracking cookies. Stripe's checkout page sets its own cookies on Stripe's site to keep payments safe.

Do Not Track

The site does no tracking, so it treats every visit the same whether or not your browser sends a Do Not Track signal. No other company collects information about your browsing across other sites through this site.

Who Sees It

• The people who run Stix & Stones, to pack, ship, and answer you.
• Stripe, which takes the payment and screens it for fraud.
• The carrier that delivers your order, which gets the address on the label.
• The email service that sends your order and shipping emails.
• If you join the list, the email service that sends the list's emails, which gets your email address.
• Our web host, which runs the site and stores its records and their nightly backup, and the person who maintains the site for us, who opens them only to keep it running.
• Cloudflare, which carries the site and keeps routine logs of requests (the address a visit came from, the page, and the time) for security.
• Our own server, which keeps the same kind of routine request logs for security and deletes old ones on a regular schedule.

Nobody else. We do not sell or rent what we keep, and we never hand it to anyone for their own marketing.

How Long We Keep It

Orders are business and tax records, so we keep them. Your place on the list lasts until you ask to leave it. Messages stay until we delete them.

Your Choices

Every list email has a link to leave the list. You can also write to us from the Contact page to leave it, to get a copy of what we have about you, or to ask us to delete it. We delete everything the law does not require us to keep as a record of a sale.

Children

The store is not meant for children under 13, and we do not knowingly keep anything about them.

Changes

If this page changes, the new version will be here with its date. Last changed October 23, 2026.