Privacy Policy

This explains what happens to your information when you use watermelonkiwi.com — what we collect, who else sees it, and how to get it removed. It describes how the store actually works, not how a template says a shop should work.

Effective 2026-08-22. Run by Space Data AI Corporation, 3943 Irvine Blvd, Suite 326, Irvine, CA 92602. Questions: watermelonkiwivictoria@gmail.com.

The short version

• You can browse the whole shop without giving us anything. We set no cookies at all unless you create an account and sign in.
• We never see your card number. Payment happens on Stripe's own checkout page, not on ours.
• There are no analytics, no advertising trackers, and no third-party scripts anywhere on this site.
• We have never sold or rented anyone's information, and we won't.
• Email watermelonkiwivictoria@gmail.com and we will delete what we hold about you.

When you're just looking around

Nothing is collected. The shop doesn't record your IP address, your location, or what pages you visit, and it doesn't set a cookie for browsing. Our web host keeps its own standard server logs, as every web host does, and those are outside our control.

When you buy something

Your cart is put together in your own browser. When you press checkout we send Stripe only the products and quantities — no personal details, because at that point we don't have any.

You then finish paying on Stripe's own page, where Stripe collects your name, email, phone number, shipping address and card details. Your card number never touches this website.

Once payment succeeds, Stripe tells us the order happened and we save: your name, email address, phone number, what you bought, the amount, and a private tracking link. We need this to actually send you your things and to answer you if something goes wrong.

Getting your order made and shipped

Printed items are made by Printify, our print-on-demand partner. To ship your parcel we give them your name, email, phone number and full shipping address. Printify and the print shop that physically makes your item need this to put a label on the box.

Handmade items are made by Victoria and packed here, so only we and the postal carrier see your address.

The newsletter

If you sign up to “Stay Fruity” we store your email address and the date you signed up. That's all — no name, nothing else. We use it only to tell you about new WATERMELON KIWI things.

Every newsletter has an unsubscribe link at the bottom. One click and we stop — you don't need an account and you don't need to ask us. You can also email us and we'll take you off by hand. Either way we keep a note that you opted out, so that a later import can't quietly put you back on the list.

Unsubscribing stops marketing email only. If you have an order with us, you'll still get the messages about that order — those aren't marketing and you can't be opted out of them while a parcel is on its way.

If you make an account

An account stores your email address and your password, and nothing else — no name, no saved address. Your password is salted and hashed before it's stored, so nobody, including us, can read it back. You can shop as a guest and never make an account at all.

Custom requests

The custom request form doesn't send anything to our website. It opens your own email app with the message filled in, so what you send goes straight to our inbox at watermelonkiwivictoria@gmail.com, which is a Gmail address. Whatever you choose to put in that email is what we get.

Looking up your orders

You can check an order by typing in the email address you used. We don't show the order on screen — we email the tracking links to that address instead, so only someone who can open that inbox can see them.

The page says the same thing whether or not that address has ever ordered from us, and we send an email either way. That's deliberate: a different answer for the two cases would let a stranger use the form to find out whether you shop here.

The tracking link itself is a long random address that can't be guessed, but anyone holding it can see that order — so treat it like a receipt and don't forward it to people you don't want seeing the order.

Who else sees your information

Only companies that help us run the shop, and only the parts they need:

• Stripe — takes your payment and collects your name, email, phone, address and card details on its own page.
• Printify — receives your name, email, phone and shipping address so printed orders can be made and posted.
• Supabase — hosts the database where order records, accounts and newsletter emails are stored.
• Resend — sends our email. It handles your address and the contents of the messages we send you: order confirmations, tracking links, and the newsletter if you signed up for it.
• Our web host — serves the site and keeps standard server logs.
• Google (Gmail) — receives custom-request emails, because our shop inbox is a Gmail address.
• Telegram — if an order is paid but fails to reach the printer, the shop sends itself an alert so we can fix it. Those alerts contain order reference numbers and the reason it failed. We don't put your name, email, phone or address into them, though an error message passed back from the printer is included as-is and we can't promise it never repeats something you typed.

We don't sell, rent or trade your information, and we don't hand it to advertisers.

Cookies and what's kept in your browser

We use no tracking or advertising cookies, so there's no cookie banner to click through. There are exactly two cookies and you only get them if you deliberately sign in — one keeps you signed in to your account, one is for the shop owner's admin page. Both last 30 days and can't be read by scripts on the page.

Your browser also remembers three things locally, which never leave your device except your cart at the moment you check out: what's in your cart, your wishlist, and whether you turned animations off. These stay until you clear your own browser data.

How long we keep things

We keep order records for as long as we're running the shop — there's no automatic clear-out. We keep them so we can help you with an order later on, and because a shop needs a record of its sales. You can ask us to delete yours at any time and we will, unless we're legally required to keep a record of a particular sale.

Whatever the period, you can ask us to delete your information sooner and we will, unless we're legally required to keep a record of a sale.

Your choices

Email watermelonkiwivictoria@gmail.com and you can ask us to: tell you what we hold about you, correct it, delete it, or take you off the newsletter. A real person handles these by hand, so please allow us a few days. Depending on where you live you may also have formal rights under laws like the GDPR or the CCPA, and we'll honour those requests the same way.

Children

WATERMELON KIWI isn't aimed at children under 13, and we don't knowingly collect their information. Accounts and the newsletter are meant for ages 13 and up, and buying needs a payment card, so orders come from grown-ups. If you're a parent or guardian and you think your child signed up or gave us their details, email us and we'll delete everything we hold about them straight away.

Keeping it safe

The site runs over HTTPS, passwords are salted and hashed, and the order database is not reachable from the public internet. No website can promise perfect security, and we're not going to pretend otherwise — but we don't store card numbers, so the worst case here never includes your card.

Changes

If we change how any of this works we'll update this page and move the date at the top. Carrying on using the shop after that means you're okay with the updated version.