Privacy Policy

Last updated: 2026-08-04

This describes what personal data Zuujis Store collects, why, and who else sees it. We collect what running a shop requires and not much else. We don't sell personal data, we don't build advertising profiles, and we don't hand anything to ad networks.

We publish this policy in several languages for convenience. Where a translation and the English version disagree, the English version is the one that counts.

What we collect

• Account data, if you register: your name, email address, and a hash of your password. Registering is optional.
• Order data: name, email, shipping address, phone number if you give one, what you ordered, and whether it was paid. We never see or store full card numbers.
• Cart contents, tied to your browser session.
• Support messages you send us, and any order they refer to.
• Convenience data: recently viewed products, and your language choice.
• Points, tier, and referral records if you take part in the rewards program.

Analytics and how we measure the store

We record what happens on the store so we can tell what's working: products viewed, items added to a cart, checkouts started, and orders completed. If you arrived from a link carrying campaign tags, we record those tags so we know which link brought you.

This happens on our own servers. There's no Google Analytics here, no advertising pixel, and nothing that follows you to other websites. The data doesn't leave us, and because it never goes to a third party we don't gate it behind the cookie banner.

If we ever add a third-party advertising or analytics tag, it will load only after you choose "Accept all" in the cookie banner, and this page will name the vendor before it goes live.

Automated order review

Every order is scored automatically for fraud risk before it goes to our warehouses. The score looks at things like how the order was paid for, whether the billing and shipping details line up, and how the account or session has behaved. A high score holds the order instead of rejecting it.

Nothing is cancelled by the scoring alone. A person reviews everything that gets held. If your order was held and you want it looked at, or you want to know what happened, contact us and a human will answer.

Who else processes it

• Stripe — takes the payment, and receives your email and card details directly. We keep Stripe's references, never the card number.
• CJ Dropshipping — fulfills the order, and receives your name, shipping address, and phone so the parcel can be picked, shipped, and tracked.
• Resend — sends our email, so it processes your address and whether the message was delivered or bounced.
• Cloudflare — serves the site and filters attacks, which means it handles IP addresses and requests the way any web host does.
• Sentry — receives a crash report when the site breaks: what page, what error, and a technical stack trace. We strip email addresses and tokens before sending, and we don't send your name, IP address, or account details.

Each of these gets your data only to do the job you asked for. None of them get it for advertising, and we don't sell personal data to anyone.

Email we send you

Order confirmations, shipping notices, and replies to your support messages are part of the service, and you get them because you bought something or wrote to us.

Marketing is separate. Newsletters go only to people who signed up and then confirmed by clicking a link in a first email. If you leave items in a cart and have given us your email at checkout, we may send up to two reminders, the first about four hours later and the second the next day. Every marketing email carries an unsubscribe link that works immediately, and unsubscribing doesn't stop the emails about an order you've actually placed.

Support conversations

You can open a support thread without an account. When you do, we generate a long random link that's the only way back into that conversation, and we email it to you. Anyone holding the link can read the thread, so treat it like a password and don't forward it. We keep support threads with the order records they relate to.

Cookies

The store sets a small number of cookies and they're all first-party:

• A session cookie, which is what keeps your cart and your login attached to you. The store can't work without it.
• A CSRF token, which stops other sites from submitting forms as you.
• Your cookie banner choice, so we stop asking.
• Your language and theme preferences.

No advertising cookies are set, and none of these are shared with anyone.

Crash reporting sits outside the banner. It only fires when something breaks, sets no cookie of its own, and doesn't follow your browsing. We treat keeping the site working as a legitimate interest rather than as tracking.

How long we keep it

Order records stay as long as bookkeeping and dispute handling need them, which in practice means years, because a chargeback can arrive long after delivery. Carts expire with your session. Accounts last until you ask us to close them.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or ask us to stop using it. California residents have these rights under the CCPA, and we extend the same handling to everyone regardless of where you live.

There's no self-service button for this yet. Email us and we'll do it by hand within 30 days. Deleting won't remove records we're legally required to keep, such as completed orders needed for tax purposes.

We have never sold personal data and we don't plan to.

Children

The store isn't meant for children under 13 and we don't knowingly collect their data. If you believe a child has given us information, tell us and we'll remove it.

Contact

Zuujis LLC, Huntsville, Alabama, United States. Privacy questions and data requests: [email protected] or through our support page.