Privacy Policy

This Privacy Policy describes how donnydidthat.com ("we," "us," or "our") collects, uses, and shares information about you when you visit our website or make a purchase. The Site is operated by David Hauser, a sole proprietor based in Ohio, USA.

By using the Site, you consent to the practices described in this Policy.

Information you provide directly. When you place an order, you provide:

• Name
• Email address
• Shipping address
• Billing address
• Payment card information (handled exclusively by Stripe)

Information collected automatically. When you visit the Site, our hosting provider (Vercel) automatically collects basic server logs, including:

• Browser type and version
• Operating system
• IP address (used for security and rate limiting)
• Pages visited and timestamps
• Referring URL

Cookies and local storage. We use minimal browser local storage to remember the contents of your shopping cart between visits. We do not use third-party advertising or tracking cookies.

We use the information we collect to:

• Process and fulfill your orders
• Send order confirmations and shipping notifications
• Respond to your customer service inquiries
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Improve the Site and our products

We do not sell your personal information. We do not use your personal information for targeted advertising.

We share information only with the service providers necessary to operate our business:

• Stripe, Inc. — payment processing. Stripe receives your name, billing address, payment card details, and order information. See Stripe's Privacy Policy.
• Vercel, Inc. — website hosting and infrastructure. See Vercel's Privacy Policy.
• Shipping carriers (e.g., USPS) — to deliver your orders. We share only your name and shipping address.
• Email service providers — for transactional emails and customer service replies.

We may also disclose information if required by law, subpoena, or legal process, or to protect the rights, property, or safety of ourselves or others.

We retain order records for as long as necessary to fulfill the purposes described in this Policy and to comply with our legal, accounting, and tax obligations (typically at least 7 years for financial records, as required by U.S. tax law).

Server logs are typically retained by Vercel for a shorter period per their data retention practices.

We use commercially reasonable measures to protect your information, including HTTPS encryption for all traffic to and from the Site, and delegating sensitive payment data handling to Stripe (a PCI-DSS Level 1 certified provider).

However, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security of your information.

Depending on where you live, you may have rights regarding your personal information, including:

• The right to access the personal information we hold about you
• The right to correct inaccurate information
• The right to request deletion of your information (subject to our legal obligations to retain certain records)
• The right to opt out of certain uses or disclosures of your information

To exercise these rights, email us at hello@donnydidthat.com. We will respond within a reasonable timeframe and may need to verify your identity before taking action.

California residents: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" of your personal information. We do not sell personal information.

The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Our Site is operated from the United States. If you access the Site from outside the U.S., your information will be transferred to, processed, and stored in the U.S. We currently ship within the U.S. only.

The Site may contain links to third-party sites (such as Stripe). We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated by updating this page; please review periodically.

For privacy-related questions or to exercise your rights, email hello@donnydidthat.com.