Legal

Privacy Policy

Stub content — attorney/service review required before launch. This page outlines what a real Privacy Policy must cover; the language below is a placeholder starting point, not final legal text.

What we collect

Name, shipping address, ZIP code (used for zone-matching), email, and payment details (handled entirely by our processor, Stripe -- we do not store card numbers). [Placeholder — confirm final data inventory once analytics/email tools are selected.]

How we use it

To fulfill and ship your membership box, communicate about your account, and (with consent) send marketing emails about new missions and offers. [Placeholder — finalize marketing opt-in/opt-out language.]

Third parties

We share data only with service providers necessary to run the business: our payment processor (Stripe), shipping platform (Pirate Ship/USPS), and email provider. We do not sell member data. [Placeholder — list final vendor names once selected.]

Your rights

[Placeholder — insert data access/deletion request process; confirm whether CCPA/other state privacy laws apply based on where members are located.]

Children's data (Family tier)

We do not knowingly collect personal information directly from children. Any child-related content (e.g., project kit customization) is provided by the parent/guardian account holder. [Placeholder — confirm COPPA compliance approach with counsel given the Family tier's kid-focused content.]