Privacy Policy

Last updated: September 13, 2026

CrypticalLife ("we", "us") sells clothing, equipment, and digital photography at crypticallife.com. This policy explains what information we collect when you use the site, why we collect it, who we share it with, and the choices you have. We keep it plain-spoken on purpose.

Information you give us

• Account details: your name, email address, phone number, and a password. We never store your password itself - only a one-way hash of it.
• Sign in with Google: if you sign up or log in with Google, Google sends us your name, email address, and a Google account identifier. We do not receive your Google password, contacts, or anything else from your Google account.
• Profile and shipping details: a profile picture and a shipping address, if you choose to add them.
• Two-factor authentication: if you enable it, an authenticator secret (stored encrypted) and a hash of your recovery phrase.
• Orders: what you bought, when, the amount, and your receipt number.
• Reviews: ratings, comments, and any photos you attach to a product review, shown publicly with your first name and last initial.
• Partner program: if you join as a partner, your chosen discount code, the commission your code earns, credit you spend, and payouts we record.
• Messages: anything you send us by email.

Payment information

Payments are processed by Square. When you check out, you pay on Square's secure checkout page - by card, Apple Pay or Google Pay. We never see or store your full card number. Square sends us back confirmation that the order was paid and the amount, which is what we use to fulfil it. Square's handling of your payment details is covered by Square's privacy policy.

Information collected automatically

• A session cookie that keeps you logged in. It is strictly necessary for the site to work and contains only a random identifier.
• Browser storage used to remember an item you tried to add to your cart before logging in, and to finish a checkout you started. This stays on your device.
• Technical logs kept by our hosting provider (Cloudflare), such as your IP address and browser type, used for security and to keep the site running. We use your IP address to limit abusive traffic, for example too many sign-up or login attempts.

We do not use advertising cookies, tracking pixels, or third-party analytics.

How we use your information

• To create and secure your account and let you log in.
• To process, deliver, and keep records of your orders, and to provide digital downloads and licenses you have purchased.
• To send transactional email: order receipts, email verification, password reset links, and similar messages about your account. We do not send marketing email.
• To run the partner program: apply discount codes, calculate commission, and record payouts.
• To display product reviews.
• To prevent fraud, abuse, and unauthorized access.
• To comply with legal and accounting obligations.

Who we share it with

We do not sell your personal information. We share it only with the services needed to run the site:

• Square - payment processing and order records.
• Google - only if you choose Sign in with Google, to verify your identity.
• Resend - delivers our transactional email.
• Cloudflare - hosts the site and stores our database and files.
• Shipping carriers - your name and shipping address, to deliver physical orders.

We may also disclose information if required by law or to protect our rights, our customers, or the public.

How long we keep it

• Account information: for as long as your account exists.
• Order and payment records: as long as needed for accounting, tax, and legal purposes, even if you delete your account.
• Login sessions: up to 30 days, or until you log out.
• Password reset and email verification links: expire within 24 hours and are deleted once used.

Your choices and rights

• You can view and update your name, email, phone, shipping address, and profile picture at any time from your account page, and link or unlink Google sign-in there.
• You can ask us to delete your account. We will delete your personal information except records we are required to keep (such as purchase records).
• You can ask us for a copy of the personal information we hold about you.
• California residents have additional rights under the California Consumer Privacy Act, including the right to know, delete, and correct personal information, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioral advertising.

To exercise any of these, email us at the address below. We may need to verify that a request comes from the account holder.

Security

The site is served only over HTTPS. Passwords are hashed, authenticator secrets are encrypted at rest, and login, sign-up, and two-factor attempts are rate-limited. No system is perfectly secure, so please use a strong, unique password and consider enabling two-factor authentication from your account page.

Children

The site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we make meaningful changes, we will update the date at the top of this page. Continued use of the site after a change means you accept the updated policy.

Contact

Questions or requests about your privacy: support@crypticallife.com