What we keep

Privacy

Short version: we keep what we need to send you a hat and to know which neighborhoods people want. We do not sell any of it.

If you request a neighborhood

We store the neighborhood name, your email, your phone number if you give one, whether you said you would buy, and anything you typed in the notes box. We store a keyed one-way fingerprint of your IP address to stop one person voting fifty times; without our secret key it cannot be matched back to an address.

Your email is how we tell you when your neighborhood's hat exists. That is the only thing we use it for.

If you vote on the ballot

We store the design you picked, a random anonymous token your browser keeps so a revisit does not double-count you, any comment you type, and the same one-way IP hash used on neighborhood requests. A name and email are optional: if you leave your email to hear the results, we use it for the results note (and the promo code, when one is offered) and nothing else. Votes decide which designs get made; they are not preorders and nothing is charged.

If you buy something

Card entry and address collection happen on Stripe's hosted checkout. Stripe processes the payment, and we never see or store your full card number. After payment, Stripe sends us the order email and shipping address so we can pass the address to Printful for fulfillment. We store the order email and transaction identifiers, but not the shipping address in our database. Stripe and Printful each govern the information they process under their own privacy policies.

If you are an affiliate

We store your name, email, phone if given, and your neighborhood, so we can reach you and pay you.

Referral links

Clicking an affiliate link sets a cookie holding that affiliate's code for 30 days. It holds a short code and nothing about you. We carry that code into Stripe Checkout and record it on the order after Stripe confirms a successful payment. Only approved affiliate codes create commission.

Advertising

If we run ads, we use Meta's pixel to measure whether they worked. You can block it with any standard content blocker and the site will work fine. When an order completes, we also report the purchase to Meta from our server for the same measurement, including your email address in hashed form so Meta can de-duplicate it against the pixel. If you want that record removed, email us and we will send Meta a deletion request for it.

Getting your data deleted

Email us and ask. We will delete your request, your affiliate record, and your contact details. We have to keep order records for tax purposes, so those stay, but we will remove you from anything else.