Privacy Policy

Information the store receives

Customer email and password sign-in is provided by Supabase. Supabase handles password storage, verification, and password-reset emails. The store receives your verified account identifier and email address. The store uses these details to recognize your account and control access to purchases and downloads. Passwords pass securely to the authentication provider and are not stored in the store catalog or order records. Earlier purchases remain associated with their original account; accounts are not combined based on matching email addresses. Owner administration continues to use a separate hosted sign-in.

Order records include the product, price, payment-provider references, payment status, and dates. Download records include the associated account, download requests, and access period. Account activity records include first and recent activity times, request-limit events, and access restrictions applied by the store owner. An owner-only visitor view uses a visitor identifier, recent activity time, and approximate country and city supplied by the hosting network for online, last-24-hour, and last-seven-day counts. Guest identification uses a seven-day cookie. The view counts each visitor identifier once per selected period and uses its most recent location. It does not request GPS access or store an IP address in the online visitor records. Location may be unavailable or reflect a VPN or network provider. Presence records older than seven days are excluded from the view and pruned when new visits are reported.

Shopping activity and browser storage

Your shopping bag and favorites are saved in your browser. Recent bag activity is also sent to the store to calculate how many shoppers have an item in their bags. A short-lived browser identifier may be used for shoppers who are not signed in.

The store also records recent visits to show an aggregate customer-online count in the owner dashboard. These counts use limited activity windows. Account, order, and download records are separate from those short-lived activity counts.

Optional analytics

Public shop and information pages offer an optional analytics choice. Google Tag Manager and any configured Google Analytics tag load only after you accept analytics. You can decline and continue browsing, or reopen Analytics choices in the footer to change your preference.

Analytics may process information about visits, pages, devices, and online identifiers under Google’s privacy practices. Store-managed tracking does not intentionally send account emails, gift card codes, or payment details. Tracking is kept off admin, account, checkout, download-account, and gift-card account pages. Tags inside the Tag Manager container are managed by the store.

How information is used

Information is used to provide account access, manage orders and downloads, display shopping activity, respond to customer requests, and protect the store against unauthorized access and repeated misuse. The owner can review customer activity and restrict an account when necessary.

Payments and service providers

Payments are handled on PayPal’s hosted checkout. This website does not ask for or store full payment-card numbers or card security codes. Checkout uses PayPal Live for real payments.

When purchase email alerts are enabled, product and order details are sent to the store owner through the configured email-delivery service. Coupon messages prepared by the owner are sent through the owner’s email app. Website hosting, storage, and sign-in are supplied through Sites and its infrastructure providers. PayPal processes the information you give it during checkout. Pages may load fonts or images from external services; those services receive the connection information needed to deliver them. Facebook and Pinterest receive information when you choose to use the sharing links.

These providers have their own privacy practices. You can read the OpenAI Privacy Policy and the PayPal Privacy Statement. PayPal’s notices may vary by your location.

Storage, retention, and security

Account, order, download, and security records remain stored for store administration unless removed through an administrative process. Some short-lived operational records are cleaned up automatically. The seven-day download period controls file access; it is not a promise that your order record is deleted after seven days.

The store uses hosted sign-in, owner-only administration, payment verification, request limits, and account-based download controls. These measures reduce risk, but no online service can guarantee complete security.

Your choices and requests

You can sign out and use your browser settings to clear locally saved favorites and bag contents. Clearing browser data does not delete purchase records or reset download limits.

To ask about access, correction, or deletion of information held by Vintage Nest Designs, contact vintagenestdesigns@gmail.com. Include enough information to identify your account or order, but do not send passwords or payment-card details. The store may need to verify your identity and explain any records that must be retained. Rights and requirements can vary by location.

Updates and contact

This page will be updated as the store’s practices change. The date above identifies this version. For privacy questions, email vintagenestdesigns@gmail.com.