What we collect

When you create an account or place an order, we collect:

• Name, email, phone number
• Shipping and billing addresses
• Order history and preferences
• IP address and device type (for fraud prevention)

We never store your card number. Payment processing is handled by Authorize.net using tokenization — your card details go directly from your browser to Authorize.net and never touch our servers.

Why we collect it

• To ship your orders and confirm age compliance
• To send transactional emails (order confirmation, tracking)
• To send marketing emails — only if you opt in, and you can opt out anytime
• To prevent fraud and chargeback abuse
• To compute loyalty points and tier progress

Who we share it with

• Carriers (USPS) — to deliver your order
• Authorize.net — to process card payments
• Resend — to send transactional emails
• Vercel and Neon — our hosting providers

We do not sell or rent your data to anyone. We do not share your data with advertisers.

Cookies

We use first-party cookies for cart persistence, session management, and age verification. We do not use third-party tracking cookies.

Your rights

You can request a full export of your data, or deletion of your account, by emailing privacy@buds.fun. We respond within 30 days.

California residents have additional rights under CCPA. New York residents have rights under SHIELD Act. We honor "Do Not Sell" requests automatically since we don't sell data.

Contact

Questions? privacy@buds.fun