Privacy

What we collect

• Your order. Name, email, postal address, quantity, and any note you add. The address is the product requirement here — it gets handwritten on an envelope.
• Payment confirmation. Stripe handles the card and tells us the payment succeeded. We never receive your card number.
• A subscription record, if you turn on auto-renew. Your delivery details, plus two Stripe reference ids that let us ask Stripe to charge the card you already used. The card itself stays with Stripe — the ids are useless anywhere else, and cancelling stops them being used again.
• Comments, if you post in a discussion. What you write is public on that volume’s page, shown under your first name and last initial — never your email. You can remove your own comments any time, or ask us to.

We do not run analytics, ad pixels, or session recording. There is no cookie banner because there is nothing to consent to beyond the cookie that keeps you signed in if you make an account.

Why we have it

To make and mail your order, to email you a confirmation and a link to look it up, to answer you when you write, and to keep the basic sales records a business is required to keep.

Who else sees it

Only the services that make the thing work, and only the part each one needs:

• Stripe — payment processing. They receive your email and card details directly.
• Neon — the database where orders are stored.
• Resend — sends the confirmation and lookup emails.
• Vercel — hosts the site.
• Clerk — sign-in, if you choose to make an account.
• The postal service — which, unavoidably, can read the address on the outside of the envelope.

Nobody else. We will not sell or rent your details, and the only circumstance in which we’d hand anything over is a valid legal demand.

How long we keep it

Order records stay for seven years, because tax records have to. Comments stay until you or we remove them. A cancelled subscription keeps its record so we can answer questions about what was charged and when, but it can never be charged again. If you ask us to delete your account, we’ll disconnect your orders from it and keep only what the sales record requires.

Your choices

Write to hello@thedeweydecimailclub.com and we’ll do any of these: send you a copy of what we hold, fix something wrong, delete what we’re not legally required to keep. No account or special form needed — we just need to be able to tell it’s you, which usually means writing from the address you ordered with.

If you’re in California, the EU or the UK, you have specific statutory rights along these lines. Rather than list them in legalese: ask for what you want and we’ll do it.

Children

This site isn’t for under-13s and we don’t knowingly collect their information. If a child has ordered, write to us and we’ll refund it and delete the record.

Security, honestly stated

Payments never touch our servers, the database is access-controlled, and order-lookup links are signed so they can’t be guessed. That said, no small business can promise perfect security. If something ever went wrong with your data, we’d email you and say so.

Who to contact

The Dewey DeciMail Club — hello@thedeweydecimailclub.com, or the contact page.