Privacy policy
How Ettch handles information in the current preview, what shopping requires, and how to contact us about your data.
Current preview notice. Effective October 14, 2026. Launch interest signup is open; this is an interest-only demo. Live sales and outgoing email are not active.
Who operates the store
Ettch is a California-based brand operated by a sole proprietor. Contact support@ettch.store for privacy questions. This preview does not list a personal home address. The seller's legal identity and appropriate business mailing details must be completed before live sales open.
Information you provide
Customer account signup is disabled in the public interest demo. In the separate local commerce prototype, optional accounts store a name, email and securely hashed password. Guest checkout collects an email without requiring an account. We process bag contents, selected products, order amounts, payment identifiers and statuses, and shipping details supplied at checkout. Support correspondence includes the details you send. Reviews contain your chosen display name, rating, title and text. Do not send passwords, card numbers or unnecessary sensitive information in support emails or reviews.
Technical information
The server receives your IP address and uses a hashed IP-derived value for short-lived abuse limits. An opaque session cookie links requests to your session. Operational error information may be used to troubleshoot the service. Page-load performance is measured locally in your browser; those measurements are not sent to an analytics service by the current code.
Why we use information
Information supports shopping, accounts, payment verification, order history, fraud prevention, support and review verification. The interest form records an email, optional color/size preferences, signup session and dated consent for future Ettch launch updates. Entries are unverified and outgoing email is disabled. Withdrawn entries are kept as minimal records of your choice. When real sales open, order and shipping details will support dispatch, returns, accounting and legal duties. There is no targeted-advertising integration, and interest is not sold or used for unrelated marketing.
Payments and other providers
Stripe is planned for future hosted checkout under its own privacy notice; no checkout or Stripe payment collection is active in this public interest demo. Ettch does not store card numbers or card security codes. Verified payment information updates orders. The public interest demo uses Cloudflare Workers for pages, essential sessions and signup processing, and Cloudflare D1 for interest records and short-lived abuse limits. Cloudflare also processes network and security information necessary to provide its service. Zoho hosts our support and launch-contact mailboxes; support messages you send are handled there. Automatic email is not connected. Separate local development data remains on the operator’s computer. At launch, hosting providers and carriers will receive information necessary for their functions; this notice will identify changed practices before they begin. We may disclose information for valid legal obligations or protection against fraud and unlawful activity.
Cookies, storage and choices
The HTTP-only session cookie lasts up to seven days unless replaced or revoked earlier. Local storage remembers your guest bag and appearance setting until cleared. Session storage temporarily holds checkout references, chosen items and the email used to retry checkout; it is normally cleared when that tab closes and checkout references are removed after confirmed payment. Clearing site storage can remove settings and sign you out; blocking cookies may prevent checkout or account functions. Signing out revokes your current session. The Cookie policy explains these uses and browser controls. The current storefront has no advertising cookies or third-party analytics scripts.
Tracking signals and sale of data
The current storefront does not sell personal information or share it for cross-context behavioral advertising. It does not track you across third-party websites for advertising. It does not change behavior in response to browser Do Not Track signals because no such storefront tracking is enabled. Stripe may process technical information on its own hosted checkout according to its separate notice. Before introducing tracking or a practice requiring a choice or consent, we will disclose it and provide required controls.
Reviews and public information
Only approved reviews linked to verified real purchases are shown. They display your chosen name, rating, text and posting date, not your email, address or order number. We check for personal information, spam and abuse without rejecting honest criticism solely for being negative. Sandbox purchases cannot generate public verified-purchase reviews. Contact support to request correction or removal of your review.
Access, correction and deletion
The public interest demo has no customer accounts or order history. Email support@ettch.store to request access, correction or deletion of information associated with you. Support handles these requests; the preview has no automated deletion or export tool. Proportionate identity verification may be needed, but we will not ask for your password or full card number. Applicable privacy rights and response deadlines are not waived. Some order or dispute records may need to be retained after account deletion.
Retention and security
Interest-list records expire 12 calendar months after your latest explicit signup consent. Expired records are excluded from the active list. Hosted cleanup is scheduled hourly and also runs before a new signup; the local Express service additionally cleans at startup. Withdrawal immediately clears color and size preferences. You can request earlier deletion through support. No marketing messages are sent while business mailing details and a tested outgoing sender remain incomplete. Other information is retained for the shopping, support, security and legal purposes described here. Sessions and short-lived abuse limits expire automatically; database account, order and review records do not yet have an automatic retention/deletion schedule. The interest-list retention schedule is implemented. Other account, order and review retention must be finalized before those features open publicly. We use password hashing, restricted access and verified payment events. The public interest demo uses Cloudflare hosting with HTTPS and restricted signup storage. When hosted on the Free plan, D1 recovery history can retain deleted data for up to seven additional days; recovered data must be subjected to the same expiry and withdrawal rules before use. No storage or transmission method is completely secure.
Children
The store is intended for adults making purchases, not children under 13. We do not knowingly solicit personal information from children under 13. Contact support if you believe a child provided personal information so we can investigate and take appropriate action.
Changes to this notice
Revisions appear here with a new effective date. Material changes will be highlighted on the storefront and, where appropriate, communicated directly to affected customers before the changed practice starts. We will obtain additional consent when law requires. A policy revision alone does not authorize a new use that requires consent.
Stripe's own notices
Hosted checkout is covered by Stripe's Privacy policy and Cookie policy. These links open in a new tab.