Short version: we never see your card number. Longer version below, because “we take security seriously” is what everyone says and none of it is checkable.
What never reaches us
Your card details are entered on a payment page hosted by Stripe, not by us. The number, the expiry and the security code go from your browser to Stripe directly. Our servers are not in that conversation and could not log it if they wanted to.
The practical consequence: a breach of this shop cannot leak your card, because your card is not here to leak.
What we do keep
Against each order:
- what you bought, how many, and what it cost
- the delivery address you gave us
- your email address, so we can send the receipt and tell you when it ships
- an identifier from Stripe that lets us look up the payment if you have a question about it, plus the last four digits and card brand as they appear on your receipt
That is the list. There is no fuller version of it kept somewhere else.
Why the receipt sometimes arrives a minute late
Receipts are not sent by the page you land on after paying. They are sent by a separate process that runs after the payment is confirmed, which means it survives you closing the tab, losing signal, or your phone deciding to update itself at the worst possible moment.
Your order is recorded whether or not you ever see the thank-you page. If you closed the tab and are now wondering whether it went through: it did, and the receipt is on its way.
