We don't sell or share your data.

What we collect

Your email

Required to sign in (we use one-time email links — no passwords) and to reply to messages you send through the contact form.

Your reviews and shop submissions

Whatever you choose to write, plus a public display name (currently the local part of your email — the bit before the @).

A session cookie

One HTTP-only cookie called site_session that keeps you signed in. It contains an opaque ID — no personal data is stored in the cookie itself.

Your IP address (briefly)

We log IPs on sign-in, shop submissions, and contact-form messages so we can rate-limit abuse. We don't build a profile from it.

Subscription details (only if you pay)

If you subscribe to a featured listing through Stripe, Stripe handles your payment information. We never see your card details. We store your subscription status, plan, and Stripe customer ID so we can show you the right billing state.

What we don't do

• We don't sell your email, name, IP, or any other data to anyone.
• We don't share your data with advertisers or marketing platforms.
• We don't run third-party trackers, ad pixels, or behavioral analytics.
• We don't email you marketing or promotional content. The only emails we send are sign-in links and replies to messages you start.

Who we share with

Two service providers, used narrowly:

• Resend — sends transactional email (sign-in links, contact-form messages). They see your email address.
• Stripe — processes subscription payments if you subscribe. They handle card data; we never see it.

We host the site on infrastructure (Postgres + a small Go API + SvelteKit frontend) under our operational control. Standard server logs (request paths, response codes) are kept for short-term debugging.

How long we keep things

• Session cookies expire after 30 days of inactivity.
• Magic-link sign-in tokens expire after 15 minutes and are single-use.
• Reviews and shop listings stay until you (or admin) remove them.
• If you ask us to delete your account, we delete it within a reasonable time. Public reviews you've written get either anonymized or deleted, your choice.

Your rights

You can request access to your data, correction, or deletion at any time. Use the contact form on the About page. We'll respond within a reasonable time (it's a small operation, but we read everything).

Cookies

Just one: site_session. It's set when you sign in, cleared when you sign out, HTTP-only (not readable by JavaScript), and scoped to this site's domain. We don't use tracking cookies, advertising cookies, or analytics cookies.

Children

datsun.shops isn't directed at children under 13. If we learn we've collected data from someone under 13, we'll delete it.

Changes to this policy

If we change anything material, we'll update the date at the top and (if it affects how we handle existing data) reach out via the email you signed up with. The current version is always at this URL.

Contact

Questions or requests? Use the contact form or email joey@datsun.net.