Legal

Privacy policy

Last updated 13 September 2026

This policy explains what Bandana collects and why. We collect as little as a store can.

What we collect

  • Your email address, when you sign in, buy a look, or join the drop list.
  • Purchase records: which looks you own, edition numbers, licence keys, and the Stripe session that paid for them. Card details never reach us; Stripe handles them.
  • Install events: when a look is downloaded with a licence key, so we can support you and count editions.
  • Basic site analytics: page views and referrers, aggregated. No advertising trackers.

How we use it

To deliver looks you bought, keep your account working, send updates to looks you own, and, if you joined the drop list, tell you when a new look lands. We do not sell or share your data with anyone except the services that run the store: Stripe for payment, Supabase for accounts and orders, Vercel for hosting, and Klaviyo for the drop list.

Your choices

Every drop-list email has an unsubscribe link. You can ask us to delete your account and data at any time via Contact; we keep purchase records only as long as tax law requires.

Cookies

We set a session cookie to keep you signed in. Nothing else.

Contact

Privacy questions go to Contact.