Operator details and legal review are outstanding. The shop is not accepting purchases.
In this local preview
The bag and delivery/currency preferences are stored on your device. A checkout attempt and private order access may use session storage. No advertising, analytics, remote fonts or social embeds are installed. Fonts and map previews are served by this application. An enquiry download is created in your browser; it is not emailed.
When commerce is enabled
The application will process selected products, delivery details, payment references and order status to handle orders. Stripe hosts the payment screen; card numbers are not collected by our application. Paid orders can be sent to Gelato after print approval. Cloudflare D1 holds order records and Cloudflare R2 stores print assets. Optional transactional mail is prepared for Resend and remains disabled.
Private status links function as access credentials. Keep them confidential. Status requests are sent in a POST body, not a public query string, and responses are not cached. The application returns no delivery address on the public status interface.
Still to complete
Pending: identity and contact of the controller; applicable legal bases; processing agreements and international-transfer safeguards; retention and deletion periods; information on rights and the competent supervisory authority; an operational process for data access and deletion requests. Do not enable sales or enquiry storage until these disclosures are reviewed.
For the local bag, clearing site storage removes saved items and preferences. This does not delete any order already held by a seller or payment provider.