Crumbfort Privacy Policy
Effective date: 10/27/26 · Operator: Crumbfort LLC · Contact: contact@crumbfort.com
Crumbfort is a small cookie bakery. This policy explains what we collect when you join the Crumbfort Cookie Club or use crumbfort.com, and what we do with it.
What we collect
- Membership details: name, email, phone number, pickup group (Tuesday or Thursday) or business delivery, box quantity, and an optional pickup-person name.
- Business members: business name, contact person, and delivery address.
- Birthday (optional): month and day only, never the year.
- Payment: handled entirely by Stripe. We never see or store your full card number. We keep Stripe's customer and subscription IDs so we can manage your membership.
- Preferences and agreements: whether you opted in to news and offers, and when; and which version of our Cookie Club policies you agreed to, and when.
- Pickup and delivery records: your pickup code, and whether a box was picked up or delivered.
- Website basics: standard technical data such as browser type and pages visited.
How we use it
- To take payment, bake the right number of boxes, and run pickups and deliveries.
- To send service emails about your membership (receipts, pickup and delivery reminders, schedule changes, sign-in links). These are part of the service.
- To send news, pop-up announcements, and a birthday treat, only if you opted in. You can unsubscribe in any email.
- To keep a waitlist and tell you when a spot opens.
- To protect against fraud and keep our records accurate.
Who we share it with
- We do not sell your personal information. We share it only with the services that help us run Crumbfort: Stripe (payments), MailerLite (email), Vercel (website hosting), Supabase (database), Resend (transactional email), and Square if you buy from us at a pop-up. They may use your information only to provide their service to us.
Pickup codes
- Your pickup code lets someone you choose collect your box. Share it only with that person. We may ask for identification at pickup.
How long we keep it
- We keep membership records while you are a member and up to 12 months afterward for accounting and dispute purposes, unless the law requires longer. Waitlist entries are kept until you ask us to remove them or you join. Policy-acceptance records (which version you agreed to, and when) are kept for as long as the membership record itself.
Your choices
- Email us to see, correct, or delete your information, or to remove your birthday or marketing consent. You can cancel your membership any time as described in our membership policy. We will respond within 30 days.
Security
- Payments are processed by Stripe. Our systems use encrypted connections and limited access. No online system is perfectly secure, so we cannot guarantee absolute security.
Children
- Crumbfort memberships are for adults. We do not knowingly collect information from children under 13.
Changes
- We may update this policy. The effective date above will change when we do, and we will tell members about material changes.
Contact
- Crumbfort LLC, contact@crumbfort.com