Privacy Policy

Last updated: August 15, 2026

KPop Swag ("we", "us") is an independent custom laser engraving service at kpop-swag.com. This policy describes exactly what personal information our site collects, why we collect it, and what happens to it. We do not run advertising, we do not use analytics trackers, and we do not sell or rent personal information to anyone.

Information We Collect

Account information

When you create an account we collect your email address and a password. Your password is stored only in a securely hashed form — we cannot see it and never store it in plain text. Email verification codes are short-lived and are not stored in readable form. You may optionally add your first and last name, phone number, and company name in your profile.

Addresses

Shipping and billing addresses you save (recipient name, street address, city, state, postal code) are stored so we can fulfill your orders.

Orders and designs

We keep records of your orders, the products and materials in them, the design files and artwork you upload, generated design previews, and proof approvals. Design uploads are stored on our server so we can produce and reproduce your items.

Payment information

Payments are processed by Stripe. Your card number is entered into Stripe's secure payment element and goes directly to Stripe — it never touches or gets stored on our servers. We keep only a Stripe payment reference, the amounts, and the payment status.

Security and diagnostic data

• Login activity: we record sign-in attempts (successful and failed), password changes, and sign-outs, together with your IP address and browser identifier. You can see your own recent login activity in Account → Security.
• Abuse prevention: IP addresses are kept in short-lived counters used to detect and block automated abuse. These expire automatically within hours.
• Error reports: if a script error happens in your browser on our site, a rate-limited error report (error message and your IP address) may be logged so we can fix bugs.
• Contact form: messages you send through our contact page are emailed to our support team and stored with your name, email, message, and IP address.

Cookies

We set a single session cookie. It keeps you signed in and remembers your cart (including guest carts). It is marked HttpOnly and SameSite, and is only sent over encrypted connections on our production site. We set no advertising cookies, no analytics cookies, and no third-party trackers.

How We Use Your Information

• Producing and shipping your custom orders, including design proofs and revisions
• Transactional email: email verification codes, password resets, order and shipping notifications
• Account security: detecting brute-force attempts, locking abused accounts, auditing sign-ins
• Responding to support requests and rights-holder notices
• Fraud prevention, chargeback response, and compliance with law (see our Terms of Service)

Marketing email is sent only if you have opted in. You can change your marketing and notification preferences at any time in Account → Preferences.

Third-Party Services

These are the only third parties that receive personal information, and only what each needs:

• Stripe (payments) — receives your card details directly and processes payment; subject to Stripe's privacy policy.
• EasyPost and shipping carriers (delivery) — receive your name and shipping address to purchase postage and generate tracking.
• Brevo (email delivery) — relays our transactional emails to your email address.
• Google Fonts — our pages load font files from Google's servers, which means your browser sends Google a standard web request (your IP address and browser identifier) when fetching them.

We do not sell, rent, or trade personal information. Ever.

Your Choices and Rights

• Access and update: your profile, saved addresses, and communication preferences are all editable in your account.
• Login transparency: your last 10 login events, with IP addresses, are visible in Account → Security.
• Deletion: email us to request account deletion. We anonymize your personal details (email, name, phone, addresses on the account). Order and payment records are retained in anonymized or business-record form as required for tax, accounting, fraud-prevention, and legal purposes, as described in our Terms of Service.

Data Retention

We retain order records, uploaded file records, proof approvals, payment references, shipping records, and related communications for as long as needed to operate the service, meet legal and tax obligations, respond to chargebacks and rights-holder complaints, and defend legal claims. Short-lived data — email verification codes and rate-limit counters — expires automatically within minutes to hours.

Security

We use industry-standard safeguards to protect your information: connections to our production site are encrypted, passwords are never stored in readable form, and we monitor for and block automated abuse. Just as importantly, we collect little and store less — the best protection for data is not holding it in the first place. No online service can guarantee perfect security, but we design ours to minimize what could ever be exposed.

Children

Our service is intended for adults. You must be 18 or older to place an order, or use the service with the involvement and consent of a parent or legal guardian, as set out in our Terms of Service. We do not knowingly collect personal information from children.

Changes to This Policy

If we change this policy, we will update the date at the top of this page. Material changes will be announced by email or account notification.

Contact

Questions about privacy or data requests: support@kpop-swag.com