Privacy Policy

When you place an order, we collect and keep:

• The engraving text you type. This often includes a name, a badge or unit number, and a department or agency. We keep it because it is what we engrave.
• The design and emblem you choose.
• Your email address, so we can send your receipt, your proof, and your tracking number.
• Your shipping name and address, so we can post your order.
• The amount you paid and identifiers from our payment processor, so we can match a payment to an order and issue a refund if one is needed.
• The progress of your order, and any changes you ask for on your proof.
• If you reached us by clicking an advertisement, what that link told us: the campaign labels (something like meta/cpc/spring) and the click identifier the advertising platform added to it. We keep these in your browser for 30 days, and if you order, they are kept with the order record, so we can tell which advertisements are worth paying for.
• When you place an order, the IP address and browser details of the device you ordered from, and any cookies an advertising platform has already set on our site. We remove these from the order after 30 days.
• An anonymous visitor number, so we can count how many visitors look at the site, start building an engraving, start checkout and complete an order. These counts are kept for 13 months and are not linked to your name or email unless you place an order.

• Your card details. Payment happens on Stripe’s own checkout page. Your card number never reaches our site and we never see it or store it.
• Your information for money. We do not sell your information. We do run advertising with Meta, Google and TikTok, described under “Who else sees your information” below — turning off advertising cookies at Your Privacy Choices stops that sharing.
• Accounts. There is nothing to sign up for. You track your order through a private link we email you, not a login.

As you fill in the engraving form, we save your work in your own browser so that leaving the page and coming back does not lose it. That draft never leaves your device and is never sent to us. You can clear it at any time with the Start over button on the form, and it is cleared automatically once you place an order.

If you are using a shared or public computer, use Start over when you are done so the next person does not see what you typed.

The site sets these cookies of its own:

• ch_vid — your anonymous visitor number. Kept for 1 year.
• ch_attr — the advertisement you last arrived from, if any. Kept for 30 days.
• ch_optout — remembers that you turned advertising off. Kept for 1 year.
• ch_checkout — lets the order confirmation page recognise the browser that placed the order. Kept for 2 hours.
• A sign-in cookie for the shop owner’s admin area, never set for customers.

None of these site cookies is shared with anyone else. We respect Global Privacy Control: if your browser sends it, your order is marked so that it is never used for advertising.

Unless you opt out at Your Privacy Choices, the advertising platforms we use also set their own cookies on our site, to recognise visits that came from their ads and measure how well those ads work:

• Meta — _fbp, _fbc
• Google — _gcl_au, _gcl_aw
• TikTok — _ttp

We do not sell your information for money. We share it only with the companies that make the order work, and only with what they need:

• Stripe — takes the payment and handles your card details.
• Resend — sends your receipt, proof and shipping emails.
• Vercel — hosts the website and stores the proof images we send you.
• Neon — hosts the database your order is stored in.
• USPS, UPS or FedEx — receives your name and address so your order can be delivered.

Advertising. Unless you opt out, we share information with Meta, Google and TikTok so they can show our ads to people likely to be interested and tell us which ads led to orders. This is “sharing for cross-context behavioral advertising” under some US state privacy laws. What they receive depends on the platform and on what you do:

• Meta, Google and TikTok each receive the pages you view on our site — plus the advertising cookies and click identifiers described above. As with any request to their servers, the browser tag itself sees the visitor’s IP address and browser details; we do not separately send those to them.
• Meta and TikTok also receive when you start building an engraving, when you start checkout, and — when you order — the order value, the design, and an order reference.
• Google receives checkout started, and the order value, design and order reference on purchase, only for whichever of those two events Google Ads is set up to measure. It does not receive an event for the earlier design step that Meta and TikTok do.
• Google only, and only when you order — once the order is paid, from the browser that placed the order, and when Google enhanced conversions are configured: your email address, name and shipping address, so Google can match the order to an ad. These are converted to a one-way code (hashed) in your browser before they are sent — Google never receives them as plain text from us. Meta and TikTok do not receive your email, name, or address from us.

Turn this off at any time at Your Privacy Choices. We also honour Global Privacy Control automatically — if your browser sends it, none of this sharing happens.

We will also hand over information if the law requires it, which has not happened and which we would rather tell you about than not.

We keep completed orders indefinitely as a record of work done — so we can answer a question about a piece years later, or make a matching one. If you started an order but never paid, that record is deleted automatically within a week.

If you want your order details deleted, email us and we will do it. We may have to keep the payment record itself for tax and accounting purposes, and Stripe keeps its own records under its own policy.

The advertising click details on an order — the campaign labels and click identifier — are kept with it like the rest of the order. The IP address, browser details, and advertising-platform cookies captured at checkout are removed from the order after 30 days. Anonymous visit counts are deleted after 13 months.

Whatever we share with Meta, Google or TikTok is kept by them under their own privacy policies, not ours.

The link we email you is the only key to your order. Anyone who has that link can see your order and approve your proof, so treat it like a password and do not post it publicly. If you think someone else has it, email us and we will issue a new one.

This is not a product for children and the site is not aimed at them. We do not knowingly collect information from anyone under 18.

If we change what we collect or who we share it with, we will update this page and the date at the top. If the change is significant and affects an order you have already placed, we will email you.

Questions about your information, a request to delete it, to ask what we hold about you, to correct it, or to appeal a decision we made about it: orders@customhandcuffs.com.