Privacy Policy
Last updated October 1, 2026
What we collect
When you pay, Stripe Checkout collects your name, email, and phone number. We also keep the date you chose, the cookies in that order, and, for a delivery order, the street address and map coordinates.
For delivery we send that address to Google to confirm it is within 5 miles of the bakery in Davenport. We keep the address and those coordinates with the order.
We do not create an account for you, we do not store a password, and we never store a card number.
Card payments
Stripe processes the payment and stores the card details. We never see or store a card number on this site. Stripe's own privacy policy is at https://stripe.com/privacy.
How we use it
We use this information to fulfill your order, send the confirmation email, and contact you about that order. We do not use it for advertising and we do not sell it.
Who else sees it
Stripe processes payments. Google checks a delivery address against the 5-mile area. Resend sends the order emails. Vercel hosts this site. Our database host stores the order record. Each of them sees only what their role requires.
Your order link
Your confirmation email includes a private order link. That page is unlisted and marked so search engines should not index it. Anyone who has the link can see that order, so keep the email.
How long we keep it
We keep order records for our own tax and kitchen records. Email us if you want us to delete an order we no longer need to keep.
Contact
Questions about your data go to crookieus@gmail.com.