Last updated: May 13, 2026
The short version. We collect the minimum information needed to fulfill your order and improve your experience on the site. We don't sell your data. We use Stripe for payments and a standard set of analytics tools to understand how the site is used.
What we collect
- Information you give us — name, email, shipping/billing address, phone, payment details when you order.
- Information collected automatically — pages visited, time on each, browser, device, IP address, and referrer through standard cookies and analytics tools.
- Information from third parties — from social logins or ad networks, governed by their own privacy policies.
How we use it
To fulfill, ship, and confirm orders. To answer customer service emails. To send the uMadeUs newsletter (if you've opted in). To improve the site and prevent fraud. To comply with applicable law.
What we don't do (and what we do)
We do not sell your personal information for money. We do not share your contact information (name, email, address, phone) with third-party marketers. We do not retain payment card data — Stripe handles all card processing.
However, under California law (CPRA), the following counts as "sharing": we run advertising pixels (Meta/Facebook, and potentially others in the future) that pass anonymous device identifiers to ad networks so we can measure ad performance and show relevant ads. This is "cross-context behavioral advertising" under CPRA — we receive no money for it, but the law treats it as sharing.
Your right to opt out: California residents can opt out of this sharing at any time via our Do Not Sell or Share My Personal Information page, or by enabling the Global Privacy Control (GPC) signal in your browser. We honor GPC signals automatically — if your browser sends one, our advertising pixels are disabled for your visit. No action required from you beyond enabling GPC.
Who we share with
- Stripe (payment processing)
- Our shipping carriers and fulfillment partner
- Email service providers (transactional and, with opt-in, newsletter)
- Analytics providers
- Law enforcement, only when legally compelled
Your rights
If you live in California, the EU, the UK, or another jurisdiction with comparable privacy laws, you may have the right to request a copy of your data, request deletion, opt out of sale or sharing (we already don't sell it), or restrict processing. To exercise any of these rights, email privacy@umadeus.shop with your order email. We respond within 30 days.
Cookies
We use essential cookies for the cart and checkout, analytics cookies for aggregate site usage, and marketing cookies to measure the performance of our occasional ads. Disable non-essential cookies in your browser or via our banner.
Data retention
Order records: as long as required by tax and accounting law (typically seven years in the U.S.). Inactive newsletter subscribers: deleted after two years of no opens or clicks.
Children
The website and purchase flow are intended for adults aged 18+. We do not knowingly collect information from anyone under 13.
Changes to this policy
We may update this policy from time to time. The "Last updated" date will always reflect the latest revision. Material changes will be posted on the homepage for 30 days.
Contact: privacy@umadeus.shop