Privacy Policy

We collect information you provide directly to us and information collected automatically when you use our site.

We use the information we collect to:

• Process and fulfill orders, including payment, shipping, and returns.
• Create and manage your account, and provide customer support.
• Send transactional emails, such as order confirmations, shipping updates, and password resets.
• Send marketing emails and newsletters, only if you've opted in — you can unsubscribe at any time.
• Notify you about back-in-stock items you've asked to be alerted about.
• Improve our products, website, and shopping experience.
• Detect, prevent, and address fraud, abuse, or security issues.
• Comply with legal obligations and enforce our Terms of Service.

We use cookies and similar technologies to keep you signed in, remember items in your shopping cart, understand how our site is used, and measure the effectiveness of our marketing. These generally fall into a few categories:

• Essential cookies — required for core functionality like sign-in, cart, and checkout.
• Analytics cookies — help us understand site usage so we can improve it.
• Marketing cookies — used to measure and personalize promotions.

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the site, such as checkout, from working properly.

We share limited information with trusted third-party service providers who help us run TumbleCraft. We do not sell your personal information.

• Stripe — processes payments securely. Stripe receives the payment and billing details necessary to complete your transaction; we never see or store your full card number.
• Cloudinary — hosts and delivers product images used throughout the site.
• Email service providers — send transactional emails (order confirmations, shipping updates, password resets) and, if you've opted in, our newsletter.
• Shipping carriers — receive your shipping address to deliver your order.
• Analytics providers — help us understand aggregate site usage and performance.

These providers are only permitted to use your information as necessary to provide their services to us, and are bound by their own privacy and security obligations.

We retain personal information for as long as necessary to provide our services, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Order records are generally kept for accounting and warranty purposes even after an account is closed.

We use industry-standard safeguards — including encryption in transit, access controls, and hashed passwords — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

• Access, correct, or update the personal information we hold about you (via your Account page or by contacting us).
• Request deletion of your personal information, subject to legal and operational retention requirements.
• Opt out of marketing emails at any time using the unsubscribe link in any newsletter, or from your account settings.
• Request a copy of the personal information we hold about you.
• Object to or restrict certain processing of your information.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before fulfilling certain requests.

If you have questions about this Privacy Policy or how we handle your personal information, reach out to us at privacy@tumblecraft.app or our general support address support@tumblecraft.app.

For questions about an order, shipping, or returns, visit our Help Center or Contact page.