Privacy Policy

This policy explains what information Reverb Crystals collects when you browse our site, create an account or place an order, what we use it for, and the choices you have. We only collect what we need to run the shop, and we never sell your information.

What we collect

Your account

If you create an account, we store:

• your name and email address, and a phone number if you choose to add one;
• your password, stored only as a one-way scrambled “hash”, so we can check it when you sign in but can never read it;
• a shipping address, if you save one to speed up future orders;
• your wishlist, and the items in your cart so it follows you between devices.

You don't need an account to shop. You can check out as a guest.

Your orders

When you place an order we keep a record of it: your email address, what you bought and what you paid, the shipping name and address you gave at checkout, a payment reference from Stripe, and shipping and tracking details once your order is on its way.

Payments

Checkout happens on a secure payment page run by Stripe, our payment processor. Your card details go straight to Stripe. We never see them and never store them. Stripe tells us whether the payment went through, along with the email address and shipping address you entered, so we can fulfill your order.

Visits to our site

We use Plausible, a privacy-friendly analytics tool that we host ourselves, to count visits and see which pages are popular, and to see how many visits lead to an order (including the order total and number of items). Plausible doesn't use cookies, doesn't build a profile of you, and doesn't track you across other websites. We don't use any advertising or ad-tracking tools.

To protect accounts from password guessing, we briefly keep a note of your IP address in memory when you sign in, create an account or request a password reset. It isn't saved.

Emails you send us

If you email us, we keep the conversation so we can help you and follow up.

Cookies and browser storage

Our site sets just one cookie, and only if you sign in:

• Sign-in cookie. Keeps you signed in to your account. It lasts up to 30 days, or until you sign out.

Your cart isn't a cookie. It's saved in your own browser's storage so it's still there when you come back, and it's cleared from this browser when you sign out. We set no advertising or tracking cookies, and our analytics uses none at all. Stripe's checkout page is run by Stripe and may use its own cookies, for example to prevent fraud, under Stripe's privacy policy.

How we use your information

• to process, ship and support your orders, including returns and refunds;
• to run your account: signing you in, saving your address, wishlist and cart, and showing your orders;
• to send account emails, such as confirming your email address and resetting your password;
• to answer your questions when you contact us;
• to keep the site and your account secure;
• to understand, in aggregate, how the site is used so we can improve it.

We don't send marketing emails, and we don't use your information for advertising.

Who we share it with

We share your information only with the services that help us run the shop, and only what they need:

• Stripe processes payments. It receives your payment details, email address and shipping address directly when you check out.
• Resend delivers our account emails, so it receives your email address and the message we're sending.
• The shipping carrier delivering your parcel sees the name and address on the label.

Our analytics runs on our own server, so that data isn't shared with anyone. We don't sell, rent or trade your information. We would only disclose it otherwise if the law required us to.

How long we keep it

We keep your account information for as long as you have an account. We keep order records for as long as we need them to support your order and to meet tax and accounting obligations. Sign-in sessions expire after 30 days, and email confirmation and password-reset links expire after a few days and one hour respectively. When we no longer need information, we delete it.

Your rights and choices

• Access and correction. You can see and update your name, email, phone and shipping address in your account, along with your orders and wishlist. For a copy of anything else we hold about you, just ask.
• Deletion. You can ask us to delete your account and the personal information linked to it. We may need to keep some order records where the law requires it.

To make a request, email us at brandon@reverbcrystals.com from the address on your account (or the one you used for your order) so we can confirm it's you.

Keeping your information safe

Our site uses HTTPS, passwords are stored only as hashes, and email confirmation and password-reset links work only once and expire. No system is perfectly secure, but we take reasonable steps to protect what you share with us.

Children

Our site isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has given us their information, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time, for example if we add a new feature or service. When we do, we'll change the “Last updated” date at the top of this page.

Contact us

Questions about this policy or your information? Email us at brandon@reverbcrystals.com.