1. Overview

Power Cookie ("we," "us," or "our") is a sole proprietorship based in California. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or place an order with us.

By using our website or making a purchase, you agree to the practices described in this policy. If you do not agree, please discontinue use of our website.

2. Information We Collect

We collect personal information that you provide directly to us when placing an order or contacting us, including:

• Full name
• Email address
• Phone number
• Shipping and billing address
• Order details and purchase history

We also collect certain information automatically when you visit our website, including:

• IP address and general location
• Browser type and device information
• Pages visited and time spent on site
• Referring URLs and click behavior

We do not collect or store full payment card numbers. Payment data is handled directly by our payment processors (see Section 5).

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Send order confirmations, shipping notifications, and customer service communications
• Coordinate local pickup or delivery logistics
• Send marketing emails you have opted into
• Send transactional or relationship text messages
• Analyze website traffic and improve our site experience
• Comply with legal obligations

We will not sell your personal information to third parties for their own marketing purposes.

4. How We Share Your Information

We share your personal information only as necessary to operate our business and fulfill your orders. This includes:

• Shipping carriers (such as UPS, FedEx, and USPS) — to deliver your order. These carriers receive your name and shipping address.
• Stripe — our payment processor. Stripe handles all payment transactions securely and is subject to its own privacy policy.
• Analytics providers (such as Google Analytics and Meta Pixel) — to help us understand how visitors use our site. These tools may collect anonymized or aggregated browsing data via cookies and tracking pixels.

We do not sell, rent, or trade your personal information to any third party for independent marketing or commercial use.

5. Payment Processing

Stripe is a PCI-DSS compliant payment processor. By completing a purchase, you agree to Stripe's Terms of Service and Privacy Policy, available at stripe.com/privacy.

6. Cookies & Tracking

Our website uses cookies and similar tracking technologies, including tools provided by Google Analytics and Meta (Facebook) Pixel. These tools help us understand how customers find and interact with our website.

These technologies may collect:

• Pages you visit and actions you take on our site
• How you arrived at our site (search, social media, direct)
• General geographic location based on IP address
• Device and browser type

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. You can manage Meta's use of your data through your Facebook Ad Preferences. Most browsers also allow you to block or delete cookies through their settings.

7. Marketing Communications

Email marketing: If you opt in to our mailing list, we may send you promotional emails about new products, special offers, and updates. Every marketing email includes an unsubscribe link. You may opt out at any time by clicking that link or emailing us directly.

Text messages: We may send transactional or relationship-based text messages (such as order updates or personal outreach) to the phone number you provide. Standard messaging rates from your carrier may apply. To stop receiving texts, reply STOP to any message or contact us by email.

Opting out of marketing communications does not affect transactional messages related to your orders (such as order confirmations or shipping notifications).

8. Your California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we have collected about you
• Request deletion of your personal information, subject to certain exceptions
• Opt out of the sale of your personal information (note: we do not sell personal data)
• Non-discrimination — we will not discriminate against you for exercising your privacy rights

To submit a data access or deletion request, email us at the address listed in the Contact section below. We will respond within 45 days as required by California law. We may need to verify your identity before processing your request.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including maintaining order records, complying with legal obligations, and resolving disputes. If you request deletion of your data, we will remove it from our active systems within a reasonable timeframe, except where retention is required by law.

10. Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to take precautions when sharing personal information online.

11. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or wish to opt out of marketing communications, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days, and to CCPA data requests within 45 days as required by law.