Privacy Policy

1. What we collect

• Contact & shipping details — name, email, shipping address, phone. Collected by Stripe Checkout when you place an order.
• Payment details — handled entirely by Stripe. We never see, store, or process your card number or full bank details.
• Order history — what you bought, when, the price you paid, the tracking number of the shipment. Stored so we can resolve disputes, reprint a lost or defective item, and handle refunds.
• Email subscriptions — only if you opt in via the welcome banner or post-purchase consent. Stored as an email address + opt-in source. You can unsubscribe with one click from every email.
• Basic analytics — page views and session data via privacy-respecting analytics. No third-party ad tracking, no cross-site cookies, no data sold to ad networks.

2. How we use it

• Fulfilling your order — we forward your name + shipping address + product details to our manufacturing partner (Printful, USA) so they can print and ship your item.
• Customer service — replying to your emails, handling returns or defective items, issuing refunds.
• Email updates — only to addresses that opted in. Brand updates + new product drops. Never daily-spam volume.
• Fraud prevention — Stripe processes risk signals automatically. We may decline an order if Stripe flags it.

3. Who we share it with

We share data only with the third-party processors that need it to do their job:

• Stripe — payment processing, fraud detection. Stripe's privacy policy at stripe.com/privacy.
• Printful — printing and fulfillment. Receives your shipping address + product details. Privacy policy at printful.com/policies/privacy.
• Resend — transactional email delivery (order confirmations, shipping notifications, welcome emails). Privacy policy at resend.com/legal/privacy-policy.
• Hosting providers — Vercel (web app), Neon (database), Cloudflare R2 (file storage). Data resides in the United States.

We do not sell or rent your personal data to anyone. We do not share it with ad networks, data brokers, or analytics platforms beyond the privacy-respecting tools above.

4. Your rights

Wherever you live, you have the right to:

• Know what data we hold about you and request a copy.
• Request correction of any inaccurate data we hold about you.
• Request deletion of your customer record (subject to legal holds — we may retain order records for tax / accounting for up to 7 years).
• Opt out of marketing email at any time via the unsubscribe link.
• Object to or restrict certain uses of your data, as required by GDPR (EU/UK), CCPA (California), or comparable laws.

To exercise any of these rights, email driftfaceless@gmail.com from the address associated with your account. We respond within 30 days.

5. Cookies & tracking

We use only the cookies strictly required to keep your cart and session working. We do not use third-party advertising or cross-site tracking cookies. We do not embed Meta Pixel, Google Ads pixel, or comparable trackers on our public storefront.

6. Children

Drift's World is not intended for children under 13. We do not knowingly collect personal data from anyone under 13. If you believe we have, email us and we'll delete it.

7. International transfers

Our hosting, payment, and fulfillment providers are based in the United States. If you order from outside the US, your data is transferred to and processed in the United States under contractual data-protection clauses with our processors.

8. Changes to this policy

If we make material changes, we'll update the effective date at the top and (for subscribed customers) send a notice by email. Continued use of the site after the effective date means you accept the updated policy.

9. Contact

Privacy questions, data-rights requests, or anything else related to this policy:

driftfaceless@gmail.com