GrainwardGRAINWARD / INFORMATION
Privacy Notice
Last updated: 23 October 2026
Scope
This notice describes the storefront and its checkout. There is no customer account, newsletter enrollment, advertising pixel or analytics script in the application.
Information you enter
The checkout asks for a name, email and delivery address. The application processes submitted delivery details in its server-side session for the confirmation; it does not write an order database or send email.
Card fields stay in the browser
Card number, expiry and security code fields are handled locally in the page. Their values are not included in the checkout API request and are not saved to local storage. They are cleared when checkout closes. Do not enter a real payment card.
Necessary session cookie
A first-party session cookie links the browser to its temporary cart and order. It is marked HttpOnly and SameSite=Lax, and Secure on HTTPS. No advertising cookies are set by the application. Clearing site cookies starts a new session. Saved favorites use local storage containing product identifiers only; clear browser site data to remove them.
Hosting and external fonts
The hosting and content-delivery providers process network information needed to serve requests, including IP address, requested URL, time, status and browser headers. Security logs may contain these fields. Google Fonts requests also disclose network information to Google. Do not put personal information in URLs.
Retention and disclosure
The application has no permanent customer-order storage or sale of personal information. Sessions expire according to the server configuration. Hosting logs are administered separately; this notice does not claim a fixed deletion schedule or complete anonymity.
Your choices
Avoid submitting real information, close checkout to clear card fields, and clear browser site data to remove the local session identifier. Depending on applicable law, access, correction, deletion or other rights may apply. A real commercial launch requires an identified operator and working privacy-contact channel.