Privacy

What we collect

• Your order. Name, email, postal address, quantity, and any note you add. The address is the product requirement here — it gets handwritten on an envelope.
• Your email, if you join the list. Only that, and only if you type it into the footer form.
• Payment confirmation. Stripe handles the card and tells us the payment succeeded. We never receive your card number.
• Your Discord ID, but only if you connect Discord in order to get the Subscriber role.

We do not run analytics, ad pixels, or session recording. There is no cookie banner because there is nothing to consent to beyond the cookie that keeps you signed in if you make an account.

Why we have it

To make and mail your order, to email you a confirmation and a link to look it up, to answer you when you write, and to keep the basic sales records a business is required to keep. If you joined the list, to send one letter a month.

Who else sees it

Only the services that make the thing work, and only the part each one needs:

• Stripe — payment processing. They receive your email and card details directly.
• Neon — the database where orders are stored.
• Resend — sends the confirmation and lookup emails.
• Vercel — hosts the site.
• Clerk — sign-in, if you choose to make an account.
• The postal service — which, unavoidably, can read the address on the outside of the envelope.

Nobody else. We will not sell or rent your details, and the only circumstance in which we’d hand anything over is a valid legal demand.

How long we keep it

Order records stay for seven years, because tax records have to. Mailing list addresses stay until you unsubscribe. If you ask us to delete your account, we’ll disconnect your orders from it and keep only what the sales record requires.

The newsletter

One email a month, on the 1st: what we’re reading and what’s in the envelope. Every one has an unsubscribe link, and unsubscribing is immediate and permanent unless you sign up again. We don’t send anything else to that list.

Your choices

Write to hello@thedeweydecimailclub.com and we’ll do any of these: send you a copy of what we hold, fix something wrong, delete what we’re not legally required to keep, or take you off the list. No account or special form needed — we just need to be able to tell it’s you, which usually means writing from the address you ordered with.

If you’re in California, the EU or the UK, you have specific statutory rights along these lines. Rather than list them in legalese: ask for what you want and we’ll do it.

Children

This site isn’t for under-13s and we don’t knowingly collect their information. If a child has ordered, write to us and we’ll refund it and delete the record.

Security, honestly stated

Payments never touch our servers, the database is access-controlled, and order-lookup links are signed so they can’t be guessed. That said, no small business can promise perfect security. If something ever went wrong with your data, we’d email you and say so.

Who to contact

The Dewey Decimail Club — hello@thedeweydecimailclub.com, or the contact page.