Privacy Policy
Last updated: September 19, 2026
This policy explains what information TombPad ("we," "us," "our") collects when you use this website, and how it's used. TombPad is operated from Kansas, United States. If you have questions, contact us here.
Information we collect
When you make a purchase, our payment processor, Stripe, collects your name, email address, shipping address, and payment details necessary to complete and fulfill your order. We do not store your card details ourselves. Stripe handles that directly and we never see your full card number.
If you choose to create an account, we collect the email address you sign in with, via our account provider, Supabase. Creating an account is optional and is never required to complete a purchase.
Your cart contents are stored in your browser's local storage so it's remembered between visits. This data stays on your device and isn't sent to us unless you complete a purchase.
If you submit your email through our discount signup popup or the newsletter section on our homepage, we collect your email address and the date you signed up, and you'll receive marketing emails from us. Every marketing email includes an unsubscribe link, and you can opt out at any time.
If you submit a product suggestion, we collect the message you write and, if you choose to include it, your email address so we can reply. Submitting a suggestion doesn't sign you up for marketing emails. That only happens through the signup popup or newsletter section specifically.
How we use your information
- To process and fulfill your order, including sharing your shipping details with our production partner, Printify, so your order can be printed and shipped.
- To communicate with you about your order (confirmations, shipping updates, and support requests).
- To improve this website and the products we offer.
Third parties we share data with
We work with the following service providers, each of which processes certain information on our behalf:
- Stripe: payment processing.
- Printify: order production and shipping.
- Supabase: optional account sign-in.
- Vercel: website hosting.
We don't sell your personal information to third parties, and we don't use advertising or analytics tracking on this site.
Cookies and local storage
This site uses your browser's local storage to remember your cart. If you sign in, our account provider may set a cookie or similar technology to keep you signed in. We don't currently use advertising or tracking cookies. If that changes, we'll update this policy and add a cookie consent notice where required.
Your rights and how to make a request
You can ask us to access, correct, or delete the personal information we hold about you at any time using our contact form. We'll honor reasonable requests directly. Kansas does not currently have a comprehensive consumer privacy statute granting specific statutory rights, but if you live in a state with its own privacy law (such as California, Virginia, or Colorado), you may have additional rights under that law, and we'll work with you to honor them.
Data security and breach notification
We take reasonable steps to protect the information we hold. In the event of a data breach affecting your personal information, we will notify affected individuals as required under Kansas law and the law of your state, where applicable.
Children's privacy
This site is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we'll delete it.
Data retention
We retain order information for as long as necessary to comply with tax, accounting, and legal obligations.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated date.
Contact
Questions about this policy can be sent via our contact form.