Privacy

Endnote Records · Updated October 2026

The short version

We collect the minimum needed to run the shop: anonymous, aggregate traffic stats while you browse, and your order and delivery details when you buy something. We don't set tracking cookies, we don't send marketing email, and we never sell or rent your information.

When you browse

We use Vercel Web Analytics and Vercel Speed Insights to see how many people visit, which pages and referrers are popular, roughly what country visitors come from, and how fast pages load. This is cookieless — no cookies, no browser fingerprinting, no cross-site tracking. The data is aggregate and cannot be used to identify you. Your IP address is used momentarily to derive a coarse location and is then discarded, never stored. Your basket is kept in your own browser's local storage so it survives a refresh; it never leaves your device until you check out.

When you place an order

Payment is handled by Stripe on Stripe's own checkout page. You give Stripe your name, email, billing and shipping address, and card details; we never see or store your card number. Stripe may set its own cookies on that page for fraud prevention — see Stripe's privacy policy. Once the order is placed we store the order details — your contact info, shipping address, the items, and amounts — so we can pack, ship, and support it, and to meet tax and accounting obligations.

Email

We only send transactional email — an order or shipping notification tied to a purchase you made — through our provider, Resend. There is no newsletter and no marketing list.

Who it's shared with

Only the services that make an order happen, and only as processors acting on our instructions: Stripe for payment, the shipping carrier for delivery, and our infrastructure providers Vercel (hosting) and Neon (database). If something on the site breaks, an error report goes to Sentry: what failed and where, never your IP address, email, or payment details. Data is processed and stored on servers in the United States. We do not sell, rent, or trade your personal information.

How long we keep it

Order records are kept as long as needed for order history, returns, and legal/tax requirements. An internal log of shop actions (for security and accountability) is automatically pruned on a fixed retention schedule. Analytics data is aggregate and time-limited by Vercel.

Your choices

You can ask us for a copy of the personal information we hold about you, to correct it, or to delete it (where we're not required to keep it). You can also opt out of Vercel Analytics entirely by enabling Do Not Track / Global Privacy Control in your browser. For anything else, get in touch.

Questions? Contact us