Privacy Policy

This page explains what information Granny’s Hugs collects when you use this site, and how we use it.

What we collect

When you create an account, we store your username, display name, email address, and a securely hashed version of your password. We never store your password in plain text. If you save a shipping address, we store that too.

When you place an order, we store the items you purchased and the shipping address you provide. Payment is processed by Stripe; we do not see or store your full card number.

When you send a message through our Contact page, we store your name, email address, and message so we can reply to you. We also record the IP address and browser the message was sent from, which we use to block automated spam.

The newsletter

If you subscribe to our newsletter, we store your email address along with the date you signed up, the IP address and browser you signed up from, and the country your connection appeared to come from. We keep that information so we can show that the subscription was genuine and deal with automated sign-ups.

We measure whether our newsletters are opened and which links are clicked. Each message contains a small invisible image, and the links in it point to our own site before forwarding you to where they say they go. This tells us that a particular subscriber opened a particular newsletter and which links they followed, and we record the IP address and browser involved. We use this only to understand which newsletters are worth sending. Many email programs block the invisible image or load it automatically, so these figures are approximate either way.

Every newsletter contains an unsubscribe link, and it keeps working indefinitely — you never need an account or a password to use it. You can also unsubscribe using your email program’s own unsubscribe button where it offers one. Once you unsubscribe we keep a record that you did so, which is what stops you being added back by mistake.

If mail to your address fails to be delivered, our mail server sends us a report, and we record the address, the date, and the reason given. Addresses that fail permanently, or repeatedly, are suspended so we stop mailing them.

Cookies and tracking

We use a small number of cookies to keep you signed in and to remember what is in your cart. A guest cart is forgotten after 30 days if it is not used.

We do not use cookies for advertising, we do not run third-party advertising or analytics scripts on this site, and we do not track you across other websites. The only tracking we do is the newsletter open and click measurement described above, which happens inside our own emails and on our own site.

Other companies involved

Running the site means a few other companies handle some of your information on our behalf:

• Stripe processes card payments. Your card details go directly to Stripe and never reach our servers.
• Cloudflare sits in front of this site to keep it fast and to absorb attacks. All traffic passes through it, so it sees your IP address.
• Our community site uses the same account as the shop. When you move from the shop into the community, we pass across your email address, display name, and role so you do not have to sign in twice.

We do not sell or rent your information to anyone.

How we use your information

We use your information to process orders, respond to messages, send the newsletter if you asked for it, manage your account, and keep the site free of spam and abuse. We use the country your connection appears to come from to decide whether to accept form submissions, because almost all the automated abuse we receive comes from outside the United States.

Your account and your choices

You can review and update your account details, including your email and password, from your Account page. Closing your account deactivates it; your order history is kept but your access is revoked.

You can unsubscribe from the newsletter at any time using the link in any newsletter we have sent you. If you would like us to delete your newsletter record entirely, rather than simply mark it unsubscribed, ask us through the Contact page and we will remove it.

Questions

If you have a question about this policy or your information, please reach out through our Contact page.

Last updated: October 2026.