Privacy Policy

Information we handle

When you create a customer account, we may handle your name, email address and account details. If you choose to add an address, we handle the delivery information you provide, such as recipient name, phone number, address, city, state, postal code and country code.

When ordering is available, we will also handle the order information needed to show your purchases and fulfil an order. We do not state a payment-processing practice here because checkout and payment processing are not currently available on this website.

Sign-in and account security

Customers can sign in with an email address and password, or with Google where that option is configured. We use Supabase to provide authentication, account sessions and database services. Authentication uses cookies or similar browser session storage so that you can remain signed in securely. We may use Cloudflare Turnstile as an anti-abuse security check on email/password account actions.

We may retain limited security and authentication event information where our service providers make it available, such as successful or unsuccessful sign-in activity, to protect accounts and investigate misuse. We do not ask you to send us your password.

Social sign-in providers

If Google sign-in is available and you choose it, Google processes information under its own privacy policy and sends the account information permitted by your settings to our authentication service. If Facebook or X sign-in is made available in the future, those providers will process information under their own privacy policies in the same way. We do not use social sign-in information to grant administrator access.

Guest cart and website storage

Your guest cart is stored locally in your browser so that selected items can remain available while you browse. It is not currently synchronised to a customer account. Clearing your browser's site data may remove the guest cart.

We use the browser storage and cookies needed for authentication and essential website operation. We do not currently state that we use advertising trackers, invasive behavioural tracking or third-party analytics. We may introduce first-party analytics later and will update this policy before making a material change to that practice.

How we use information

We use information to create and secure customer accounts, display your profile, save addresses you choose to provide, respond to requests, and operate the website. When ordering is available, information may also be used to process and support orders.

Sharing and service providers

We do not sell personal information. We use Supabase as a service provider for authentication and database functionality. OAuth providers process sign-in information under their own policies. We may disclose information where reasonably necessary to protect the website, investigate fraud or comply with a legal obligation.

Security

We use reasonable technical and organisational measures designed to protect account and website information. No internet service can guarantee absolute security, so please use a unique password and protect access to your account.

Your account and deletion requests

You can update your profile and saved addresses from your account. To request account or personal-data deletion, contact us through @krukidooki on Instagram and include the email address associated with your account. We may need to verify your request before acting on it.

Changes and contact

We may update this policy when the website or its data practices change. The current version will be published on this page. For privacy questions, contact @krukidooki on Instagram.