What we know about you, in full.

• Your email address, if you join the waitlist or subscribe — used for the emails you asked for, nothing else.
• A device cookie, so your cart and session survive a page reload. It identifies your browser, not you.
• Your name, email and shipping address when you place an order — because a parcel needs somewhere to go.
• Your name and email from Google, if you choose to sign in with Google. Signing in is optional; the shop works without it.

Your card details. Payment is processed by Stripe, and the numbers go straight from your browser to theirs — they never touch our servers, our logs or our database. We could not leak your card if we tried.

One cookie, for your cart and session. No advertising trackers, no third-party cookies, and one analytics provider — Plausible, which is cookieless: the page, where you arrived from, and a rough country, with nothing stored on your device and no identifier that follows you from one visit to the next. It cannot tell us who you are, and we have not asked it to. That is why there is still no banner: there is nothing here to consent to.

If you gave us your address, we write when there is something to say — no cadence promised. Every marketing email carries a one-click unsubscribe link, and it works the first time. Order receipts and shipping notices are not marketing and follow your orders instead.

Stripe sees what a payment processor must. The carrier sees the address on the box. Plausible sees a page view with no name on it. That is the list — we do not sell, rent or trade your data, and there is no “partners” paragraph hiding here.

Unsubscribe any time from the link in any email, or at /unsubscribe. To see or delete what we hold on you, write to hello@kelvas.co from the address in question and we will do it within 30 days, usually much faster.

If this policy changes in a way that matters, we will say so by email before it takes effect — not bury it in a footer revision. Questions go to hello@kelvas.co.