PRIVACY

This policy applies to personal information handled through the Terminal Club storefront, checkout, Join Terminal email form, and related order administration. Terminal Club is operated by Edilson Cano, a sole proprietor operating under the Terminal Club name. In this notice, “Terminal Club,” “we,” “us,” and “our” refer to Edilson Cano.

An address supplied privately to a payment provider for identity verification is not automatically the public correspondence address or merchandise-return address. No address has been added to this website, and a public correspondence address will not be published without prior approval.

• Order and checkout information: email, optional name, shipping address, product, quantity, amount, currency, payment and fulfillment status, and Stripe transaction identifiers.
• Join Terminal information: email address, signup source, consent version and time, subscription status, synchronization status, and unsubscribe, complaint, bounce, or suppression records.
• Contact information: name, email, and message only after the support inbox has been approved and a contact provider is configured. Until both launch gates are active, the form remains disabled and collects, sends, and stores nothing.
• Security and technical information:ordinary request and hosting logs, plus temporary one-way identifiers derived from email and network address for newsletter abuse prevention. The newsletter limiter does not store the raw network address.
• Cart information: product ID and quantity stored in your browser's local storage so the cart can persist on that device.

Payment is entered on Stripe-hosted Checkout. Terminal Club does not receive or store the full card number or card security code in its own database. Stripe collects the contact, shipping, payment, and, when needed, billing information entered at Checkout. Stripe may separately process device, fraud-prevention, and compliance information under its own privacy practices.

• to create checkout sessions, administer inventory, process and confirm orders, fulfill purchases, and manage returns or refunds;
• to send private-release marketing only after an affirmative Join Terminal request;
• to record and honor unsubscribes, bounces, complaints, and provider suppressions;
• to respond to messages when a contact provider is configured;
• to protect the storefront, prevent abuse and fraud, and diagnose service problems; and
• to meet accounting, tax, legal, and regulatory obligations.

Where data-protection law requires a legal basis:

• order and fulfillment processing is necessary to perform a contract or take requested pre-contract steps;
• Join Terminal marketing relies on consent;
• reasonable security, fraud prevention, and service administration rely on legitimate interests; and
• required accounting, tax, and legal records rely on legal obligations.

Consent may be withdrawn at any time without affecting earlier lawful processing.

Terminal Club uses the following services to operate the storefront:

• Stripe for hosted checkout, payment processing, and payment-risk controls;
• Supabase for private order, inventory, newsletter, consent, and webhook records;
• Resend for marketing contacts, delivery, and suppression management; and
• Vercel for website hosting and server execution.

These providers may process information in other countries and may handle some information for their own security, fraud, compliance, or service-administration purposes under their own terms. Information may also be disclosed when required by law, to protect legal rights, or as part of a properly structured business transfer.

Terminal Club does not use personal information collected through this storefront for sale or cross-context behavioral advertising. No first-party analytics, advertising pixel, or tag manager is currently installed.

Join Terminal is an optional marketing list and is not required to purchase. New submissions are currently paused. If the list is later activated, each marketing email will include an unsubscribe control. An unsubscribe, complaint, hard bounce, or provider suppression is retained so that the address is not mailed again. A future signup after an unsubscribe will not silently reactivate the address, and unsubscribing does not itself delete historical consent or suppression records.

The storefront code currently uses these essential browser records:

• terminal-club-cart local storage: product IDs and quantities used to keep the cart on the device until checkout succeeds, the cart is cleared, or site data is removed.
• terminal-club:checkout-attempt:v1 session storage: a random attempt identifier, timestamps, and a cart and policy-review fingerprint used to make test-checkout retries idempotent. It is cleared after success, when the checkout inputs change, or when the browser ends the tab session.
• Search and form drafts: unsubmitted text may be kept in session storage or the current history entry so Back navigation can restore it. It is not sent before submission.
• tc_checkout_access strictly necessary cookie: a signed value containing an encoded Stripe test-checkout session identifier and expiry. It authorizes this browser to view only the matching test-checkout status. It is HttpOnly, SameSite=Lax, limited to checkout paths, Secure on HTTPS, and expires after two hours. It is not used for advertising or cross-site tracking.

Cart contents remain in local storage until a successful checkout clears them, you remove them, or browser data is cleared. Order data is retained as reasonably necessary for fulfillment, returns, refunds, fraud prevention, recordkeeping, and legal obligations. Newsletter data is retained while subscribed and afterward as needed to document consent and honor suppression. Unsubmitted search, contact, and newsletter drafts may be kept only in the current browser tab's session storage or history so Back navigation can restore them. They are not sent to Terminal Club before submission. Browser session restore features may retain a draft when reopening a tab, so the exact lifetime is controlled by the browser's session-history and site-data settings.

Stripe may set separate storage when a customer intentionally opens Stripe-hosted Checkout. Vercel may also use essential security storage on protected Preview deployments. Those providers control their own storage durations and describe them in their privacy materials. The storefront has no non-essential analytics, advertising, or session- replay storage, so it does not display a cosmetic consent banner.

A final record-retention schedule has not yet been adopted. Live sales must not begin until the operator has documented that schedule and a process for coordinated deletion from Supabase, Resend, Stripe where applicable, and any future contact provider.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability, and to complain to a privacy regulator. Legal or operational records may be retained when required. Marketing consent can be withdrawn through the unsubscribe control in an email.

Terminal Club must publish a monitored privacy-request method before continuing beyond this test stage or sending marketing. Until then, do not rely on support@terminaljewelry.com or on a contact submission that reports it was not stored. Sending-domain verification alone does not create or test a receiving inbox. This unresolved access path is recorded in the launch notes rather than being presented as a working service.

Because the storefront does not currently use cross-site behavioral advertising, browser Do Not Track or opt-out preference signals do not change its behavior. Stripe Checkout and the linked Instagram and TikTok services are separate sites with their own storage and privacy practices. This policy must be updated before non-essential analytics or advertising tools are introduced.

Terminal Club uses access controls, server-only credentials, signed webhooks, and private database structures designed to protect information. No online service can guarantee absolute security. The storefront is not directed to children under 13, and Terminal Club does not knowingly collect personal information from a child under 13.

This policy may be updated when the storefront, providers, or legal obligations change. A new effective date will be posted here, and material changes will apply prospectively.

Read the Terms & Conditions, Shipping Policy, and Returns Policy for the other rules that apply to the storefront.