Privacy
Who is responsible
Ivan Ramirez Dawson, tax ID 45965848A, Calle Delicia 1, 17310 Lloret de Mar (Girona), Spain, is the data controller. Contact: info@jarsofmystery.com.
What we collect
Your email address, shipping address and name, collected by Stripe during checkout and passed to us to fulfil the order. We do not receive your card number. We do not use advertising trackers. We keep anonymous visit statistics on our own server (self-hosted Umami): no cookies, no cross-site identifiers, nothing that can name you — which is why there is no consent banner to click. If you reach us through a link we published (a newsletter, a social post, a shopping listing), we keep the name of that campaign with your order — the campaign's name, never anything about you.
Why we hold it
To send you the jar, to email you the confirmation and shipping notice, and to keep the accounting records Spanish law requires.
News by email
Two ways onto the list, both opt-in: the box you can tick at checkout, or the form on the shop page — which sends you one email with a link, and nothing happens until you click it. Buying alone never puts you on the list. We keep your address, your language, the date and where you signed up; the list itself is hosted by Resend, who already handle our order emails. Every newsletter carries an unsubscribe link, and writing to us works just as well: you come off the same day.
Who else sees it
Stripe (payment), Resend (transactional email) and the carrier that delivers your parcel. Nobody else. We never sell or rent your data.
How long
Order records are kept for the period required by tax law. Beyond that, write to us and we will delete what remains.
Your rights
You can request access, correction, deletion or a copy of your data by writing to info@jarsofmystery.com. You may also complain to the Spanish data protection authority (AEPD).