Privacy Policy

We collect two different kinds of information, depending on how you use the site: information you submit through our forms, which we actually receive, and information created by optional local demo features, which stays in your own browser and we never see. See “How Account, Cart, and Review Data Is Stored” below for details on the second kind.

• Purchase information: when you check out, your shipping address, order details, and payment information are collected and processed entirely by Shopify, our e-commerce platform. We do not receive, store, or have access to this information ourselves — see “Third-Party Sharing” below.
• Contact, Custom Orders, and Suggestions form information: when you submit one of these forms, we collect your name, email address, and message content. These submissions are delivered to us by email via our form provider, Formspree.
• Account, cart, and review information: if you create a demo account, add items to your cart, or submit a product rating, that information is saved only in your own browser’s local storage. We do not collect, receive, or store it.

We use the information we actually receive to:

• Respond to messages submitted through our Contact, Custom Orders, and Suggestions forms.
• Fulfill and communicate about custom order requests.
• Improve our products, site, and shopping experience based on the feedback you send us.
• Detect and prevent fraud and abuse of our forms.

Orders placed through checkout are fulfilled by Shopify directly; we don’t hold a separate copy of your order to use for any other purpose.

Creating an account, saving cart items, and submitting product ratings are demo features built for this site’s own use. Here’s exactly how they work, described plainly:

• This data lives only in your browser’s local storage. It is never sent to, or stored on, any server we control.
• There is no account backend. If you create a demo account, the password you choose is stored as plain text in your browser’s local storage — not hashed, not encrypted. Please don’t reuse a real password here.
• Product ratings and reviews you submit are visible only in the browser you submitted them from. They are not shared with, or visible to, other visitors or stored anywhere we can access.
• Because none of this reaches us, clearing your browser’s site data (or using a different browser) removes it completely and permanently — there is no copy anywhere else to delete.

For the information we actually receive — messages submitted through our Contact, Custom Orders, and Suggestions forms — we rely on our form provider’s and email provider’s security practices to protect it in transit and in your inbox. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

Account, cart, and review data never leaves your browser, so its security depends on your own device and browser settings rather than on us.

We share information with the following third parties, and only as needed to operate our store:

• Shopify: our e-commerce platform. When you check out, your shipping address, order details, and payment information go directly to Shopify — we never receive or store them. Shopify processes payments itself; we do not see or store full payment card details.
• Formspree: our form provider, used to deliver messages submitted through our Contact, Custom Orders, and Suggestions forms to our email inbox.

We do not sell your personal information to third parties, and we do not currently send marketing emails.

We do not use cookies of any kind — no analytics, no advertising, no tracking. The banner you may see on your first visit is a privacy notice, not a cookie-consent request; there is nothing to opt in or out of.

Instead, the site uses your browser’s local storage for a small number of essential, functional purposes: remembering your demo account sign-in, remembering items in your cart, remembering that you’ve dismissed the privacy notice, and remembering product ratings you’ve submitted. As described above, none of this is transmitted to us. You can clear it at any time through your browser’s settings.

For the information we actually hold — messages you’ve submitted through our Contact, Custom Orders, or Suggestions forms — you may contact us at any time to request access to, correction of, or deletion of that information.

For account, cart, and review data, which stays in your browser and never reaches us, you don’t need to contact us at all: you can view, change, or permanently delete it yourself at any time by clearing your browser’s site data for this site, as described above.

Questions about this Privacy Policy or how we handle your data? Reach out to us at:

Email: happyduckhats@gmail.com

We will respond to your inquiries within 30 days.

We reserve the right to update this Privacy Policy at any time. Changes will be effective when posted to our site. Your continued use of the site following any changes constitutes your acceptance of the updated Privacy Policy.