Privacy Policy

Draft: fill the [bracketed] placeholders in js/legal-config.js and have all legal texts reviewed by a US lawyer before publishing.

1. Who we are

, , . This policy covers our website and online shop.

2. Information we collect

Order information, mostly provided by PayPal: name, email, phone (if provided), shipping address, items ordered, custom configuration or engraving text and order totals. We do not receive your card number.
Newsletter: your email address, language and the time of your consent.
Automatically: IP address, browser type and pages requested (server logs kept by our hosting providers).
Personalization text you enter for engraved or personalized items (for example a name, birthday or ID number). We use it only to make your item; it is kept with your order. Please do not enter sensitive information.
Messages you send us by email.
Inputs in our charm finder (for example your pet's name or birth date) stay in your browser and are not stored by us.

3. How we use it

To process and ship orders, handle payments and refunds, provide customer service, meet legal and tax duties, keep the site secure and prevent fraud, and send our newsletter if you opted in.

4. Who we share it with

Service providers working for us: PayPal (payments), Supabase (database), Netlify (hosting), Resend (email delivery), our carrier our production partners in China (order contents and personalization text) and customs authorities (name, address, phone and contents of the parcel). We do not sell your personal information and do not share it for cross-context behavioral advertising.

5. Where data is processed

We operate from China. Your data is processed in China, the United States and other countries where our providers operate. By ordering, you consent to this transfer and processing.

6. Cookies and tracking

We use no advertising or analytics cookies. Your browser's local storage keeps your cart and language. PayPal may set its own cookies at checkout. Fonts are hosted by us. We do not track you across websites, so Do Not Track signals have no effect, and we treat Global Privacy Control signals as opt-outs.

7. Your choices and rights

You can unsubscribe from emails at any time with the link in each email. You can ask us to access, correct or delete your personal information by emailing . Residents of California and other states with privacy laws have the right to know, delete and correct their information, to opt out of sale or sharing (we do neither) and not to be discriminated against for using these rights. We may need to verify your identity and will respond within 45 days. An authorized agent may submit requests on your behalf.

8. Retention

9. Security

We use reasonable safeguards, but no system is completely secure.

10. Children

Our shop is not directed to children under 16 and we do not knowingly collect their data.

11. Changes

We may update this policy. Last updated:

12. Contact

隐私政策

草稿：请在 js/legal-config.js 中填写 [方括号] 占位内容，并在发布前请美国律师审核全部法律文本。

1. 我们是谁

，，。本政策适用于我们的网站和网店。

2. 我们收集的信息

订单信息（主要来自 PayPal）：姓名、邮箱、电话（如提供）、收货地址、所购商品、定制配置或刻字内容及订单金额。我们不会收到您的银行卡号。
订阅邮件：邮箱地址、语言和同意时间。
自动收集：IP 地址、浏览器类型和访问页面（由托管服务商保存的服务器日志）。
您为刻字或个性化商品输入的文字（如名字、生日或编号）。我们仅用于制作您的商品，并与订单一并保存。请勿输入敏感信息。
您发给我们的邮件。
您在水晶推荐工具中输入的内容（如宠物名字或生日）仅保留在您的浏览器中，我们不会保存。

3. 使用目的

处理和寄送订单、处理付款和退款、提供客户服务、履行法律和税务义务、保障网站安全和防止欺诈，以及在您同意后发送订阅邮件。

4. 与谁共享

为我们提供服务的供应商：PayPal（支付）、Supabase（数据库）、Netlify（托管）、Resend（邮件发送）、承运商、生产合作方（订单内容及个性化文字）和海关（姓名、地址、电话及包裹内容）。我们不出售您的个人信息，也不为跨站行为广告而共享。

5. 数据处理地点

我们在中国运营。您的数据会在中国、美国及我们的供应商所在的其他国家处理。下单即表示您同意此类传输与处理。

6. Cookie 与追踪

我们不使用广告或分析 Cookie。浏览器本地存储用于保存购物车和语言。结账时 PayPal 可能设置其自有 Cookie。字体由我们自行托管。我们不跨网站追踪您，因此“请勿追踪”信号不起作用，同时我们将“全球隐私控制（GPC）”信号视为退出选择。

7. 您的选择与权利

您可随时通过每封邮件中的链接退订。您可发邮件至，要求查阅、更正或删除您的个人信息。加州及其他有隐私法的州的居民有权了解、删除和更正其信息，有权拒绝出售或共享（我们两者均不做），且不会因行使这些权利而受到歧视。我们可能需要核实您的身份，并将在 45 天内答复。授权代理人可代为提出请求。