The store keeps as little as possible in the browser and keeps commerce credentials and private calls on the server.
We process the email address, the products chosen, the payment method identifier, the order reference, and the technical anti-fraud data needed to create, verify, and deliver an order. Card details are entered directly into the payment provider you choose; this store does not collect or store them.
The cart is stored locally in your browser. A signed, server-only session (HttpOnly) authorizes access to your orders and the invoice generated at checkout. Rate-limit records and one-time codes in production are stored in the configured store for a limited time.
Our commerce platform processes the order record, the payment providers you choose process the charge, and our email provider sends access codes and the order email. Their own privacy notices govern the data those services handle directly.
You can clear the local cart data from your browser storage settings and sign out to remove the session cookie. To request access, correction, or deletion of order data, write to us with the order reference and the email you used to buy.
