Privacy Policy

We collect your email if you join the drop list, and your name, email and shipping address if you place an order. We use it to send you your plushies and to tell you about new ones. We do not sell it, rent it, or share it with anyone who is not helping us get a box to your door.

The rest of this page is the detail behind that. This policy covers https://www.scriptureplushies.com and is provided by The Plushie Company, trading as Scripture Plushies.

Information you give us

• Drop list signup — your email address, and your first name if you provide one.
• Placing an order — your name, email address, shipping address, and billing address.
• Contacting us — whatever you include in your message.

Information collected automatically

• Technical data — IP address, browser and device type, pages viewed, and referring page. Our hosting provider records this in server logs as part of delivering the site securely.
• Your basket — the items you add are stored in your own browser (in local storage, not a cookie) so the basket survives a refresh. It stays on your device and is only sent to us when you start checkout.

What we never see

Your card details. Payment information goes directly to Stripe and never touches our servers. We receive only whether the payment succeeded, the last four digits, and the card brand.

• To process, fulfil and deliver your order.
• To email you about your order — confirmation, tracking, and any change to a preorder ship date.
• To send drop announcements, if you asked for them. One email per drop.
• To answer your questions and handle returns and warranty claims.
• To keep the shop working and secure — detecting fraud, preventing abuse, and fixing faults.
• To meet our legal and tax obligations, including keeping records of sales.

We share the minimum necessary with the companies that run parts of our shop. Each acts as our service provider and is bound to use your data only to provide their service:

• Stripe — payment processing, fraud prevention, and refunds.
• Vercel — hosting and delivery of the website.
• Supabase — the database holding products, orders and the drop list, and storage for product photography.
• Shipping carriers — your name and address, so they can deliver your parcel.
• Email provider — to send order and drop emails.

We may also disclose information where we are legally required to, or to protect our rights, safety, or property. If our business is ever sold or merged, customer records may transfer as part of that transaction; we would tell you first.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We keep this deliberately minimal. We run no advertising trackers and no social media pixels, and nothing that identifies you personally.

What is set, and when

• Visit counting — we use Vercel Analytics to count page views. It sets no cookies and builds no profile of you, so it runs for everyone.
• Google Analytics — only if you agree. It sets cookies to recognise a returning browser and tells us which characters people look at. Say no and it is never loaded at all — no script, no cookie, no request to Google. You can change your mind from the Cookie settings link in the footer.

• Your basket is kept in your browser's local storage. Clearing your site data empties it.
• Admin login uses a single signed cookie, and only for shop staff signing into the dashboard.
• Stripe sets its own cookies on its checkout pages for fraud prevention, governed by Stripe's privacy policy.

If we ever add another tracker, we will update this page and ask you again before turning it on.

We make toys for children, but this website is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us their information, email hello@theplushiecompany.com and we will delete it promptly.

• Order records — kept as long as needed for tax, accounting and warranty purposes, typically seven years.
• Drop list — until you unsubscribe or ask us to delete you.
• Support emails — kept while they are useful for context, then deleted.

The site is served over HTTPS, our database and photo storage sit behind access-controlled credentials, and the admin dashboard is password protected with an expiring signed session. Card data never reaches our systems. No method of transmission or storage is perfectly secure, but if a breach ever affected your data we would notify you and the relevant authorities as required by law.

You can ask us at any time to:

• tell you what personal information we hold about you;
• correct anything inaccurate;
• delete it — we will, other than order records we must keep for tax purposes;
• give you a copy in a portable format;
• stop sending you marketing email.

Email hello@theplushiecompany.com and we will respond within 30 days. We will not treat you differently for exercising any of these rights.

California residents

Under the CCPA/CPRA you have the rights above, plus the right to know what categories we collect, our purpose, and the categories of third parties we disclose to — all described on this page. We have not sold or shared personal information in the preceding twelve months, and we do not knowingly sell the personal information of anyone under 16.

Canadian and other international customers

We ship to the United States and Canada. Your information is processed and stored in the United States, which may have different data protection laws than your home country. By ordering, you consent to that transfer.

We may update this policy as the shop changes. The date at the top of this page shows the current version. Material changes will be announced by email to our drop list.

For any privacy question, or to make a request about your data, contact:

See also our Terms of Service.