Privacy Policy

Last updated: April 11, 2026

We respect your privacy. This policy explains what we collect, why, and what you can do about it. We don't sell your data — ever.

1. What We Collect

Account info: your name, email, and password if you create an account.
Order info: shipping address, billing address, order contents, and order history.
Payment info: we never see or store your card number. Stripe handles all payment data.
Sweepstakes entries: name, email, and mailing address (required by law for compliance).
Usage data: pages visited, features used, device type (collected anonymously via Google Analytics 4 and Plausible).
Communications: emails you send us, chats, and support interactions.

2. How We Use It

To fulfill your orders and ship your products.
To run our sweepstakes, notify winners, and comply with legal requirements.
To send you order confirmations, shipping updates, and — if you opted in — our weekly newsletter.
To improve the site, fix bugs, and understand how people use it.
To prevent fraud and enforce our Terms.

Stripe for payment processing.
Printify and partner shops for order fulfillment.
Resend / Loops.so for transactional and marketing email.
Shipping carriers (USPS, UPS, FedEx) to deliver your order.
Google Analytics 4 and Plausible for anonymized usage metrics.

We do not sell your data to third parties. We do not share your data for advertising purposes.

4. Cookies

We use essential cookies (shopping cart, login session) and anonymous analytics cookies. You can disable non-essential cookies via your browser settings.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

Request a copy of your personal data.
Request correction or deletion of your data.
Object to or restrict processing.
Withdraw consent for marketing.
File a complaint with a regulatory authority.

Email hello@forgeandanvil.co to exercise any of these rights. We'll respond within 30 days.

6. California Residents (CCPA/CPRA)

You have the right to know what personal information we collect, delete it, correct it, and opt out of its "sale" (we don't sell it). To exercise these rights, email us.

7. Data Retention

We keep order records for 7 years for tax and accounting purposes. We keep sweepstakes entry records for 2 years after the drawing date. Marketing list data is kept until you unsubscribe.

8. Security

We use HTTPS site-wide, Stripe's PCI-compliant infrastructure, and modern authentication (Supabase Auth). We will notify affected users within 72 hours of a confirmed data breach.

9. Children

Our site is not directed at children under 13. We do not knowingly collect data from anyone under 13. Sweepstakes entries are restricted to users 18 and older.

10. Contact

Email hello@forgeandanvil.co or mail: 1214 Forge Lane, Newport News, VA 23601.