What we keep

Privacy

Short version: we keep what we need to send you a hat and to know which neighborhoods people want. We do not sell any of it.

If you request a neighborhood

We store the neighborhood name, your email, your phone number if you give one, whether you said you would buy, and anything you typed in the notes box. We store a keyed one-way fingerprint of your IP address to stop one person voting fifty times; without our secret key it cannot be matched back to an address.

Your email is how we tell you when your neighborhood's hat exists. That is the only thing we use it for.

If you vote on the ballot

We store the design you picked, a random anonymous token your browser keeps so a revisit does not double-count you, any comment you type, and the same one-way IP hash used on neighborhood requests. A name and email are optional: if you leave your email to hear the results, we use it for the results note (and the promo code, when one is offered) and nothing else. Votes decide which designs get made; they are not preorders and nothing is charged.

If you buy something

Card entry and address collection happen on Stripe's hosted checkout. Stripe processes the payment, and we never see or store your full card number. After payment, Stripe sends us the order email and shipping address so we can pass the address to Printful for fulfillment. We store the order email and transaction identifiers, but not the shipping address in our database. Stripe and Printful each govern the information they process under their own privacy policies.

If you start a checkout, type your email and leave without paying, Stripe still passes us that address when the session expires. We use it once, to send a single message saying the hat is still there. Once ever, never to anyone who has already bought, and never a sequence. Reply "stop" to anything we send and we will not write again — that suppression is global and permanent, and it covers this too.

If you are an affiliate

We store your name, email, phone if given, and your neighborhood, so we can reach you and pay you.

Referral links

Clicking an affiliate link sets a cookie holding that affiliate's code for 30 days. It holds a short code and nothing about you. We carry that code into Stripe Checkout and record it on the order after Stripe confirms a successful payment. Only approved affiliate codes create commission.

How you got here

On your first visit we set a cookie for 60 days recording where you came from: the utm_source on the link if it had one, or the website that linked you, plus the first page you landed on. If you buy something, that record is stored on the order. It is how we tell whether Instagram, a newspaper story or a friend's message actually sells hats, and it is kept for as long as we keep the order.

It records the site that sent you, never a profile of you, and it is written once — later visits do not overwrite it. Clearing your cookies removes it, and doing so costs you nothing.

Counting visits

While your browser is open we set one cookie holding a random id, so we can count how many people looked at a hat and how many bought one. It expires when you close your browser and it holds nothing about you: no name, no email, no address, no device fingerprint, and no record that survives to a second day. We store which pages that id saw, where you came from, and nothing else. It is how we tell whether a page is failing or nobody is reaching it, which are different problems with different fixes.

Hat pages are sometimes shown in two versions with different wording. A second cookie, kept for 30 days, holds a single letter recording which version you saw, so that you keep seeing the same one and so we can compare the two. It holds nothing else. Price, shipping and checkout are the same in both versions.

Advertising

If we run ads, we use Meta's pixel to measure whether they worked. You can block it with any standard content blocker and the site will work fine. When an order completes, we also report the purchase to Meta from our server for the same measurement, including your email address in hashed form so Meta can de-duplicate it against the pixel. If you want that record removed, email us and we will send Meta a deletion request for it.

Getting your data deleted

Email us and ask. We will delete your request, your affiliate record, and your contact details. We have to keep order records for tax purposes, so those stay, but we will remove you from anything else.