Privacy Policy
Galactic Jems ("we", "us") respects your privacy. This policy explains what we collect, why, and the choices you have. The short version: we collect only what we need to fulfill your order, we don't sell your data, and we don't run advertising trackers.
What we collect
- Order information — your name, email, and shipping address, collected at checkout to fulfill and ship your order.
- Payment details — handled entirely by our payment processor, AeroPay, which lets you pay directly from your bank account. Your bank login and account credentials are handled by AeroPay's secure bank-linking service and never touch our servers.
- Cart contents — stored locally in your own browser (localStorage) so your cart survives a page refresh. This data never leaves your device until you check out.
- Age confirmation — your 21+ confirmation is stored only for your current browser session.
- Newsletter email — only if you choose to subscribe.
- Site analytics — privacy-focused, cookie-free aggregate metrics (page views, referrers) that cannot identify you individually.
How we use it
- To process, ship, and provide support for your orders.
- To send transactional emails (order confirmation, shipping updates).
- To send occasional marketing emails only if you subscribed — every one includes an unsubscribe link.
- To understand aggregate site traffic and improve the store.
What we never do
- Sell, rent, or trade your personal information.
- Run third-party advertising trackers or sell data to ad networks.
- Store your payment card or bank credentials.
Who we share data with
Only the service providers required to run the store: AeroPay (pay-by-bank payment processing), Cloudflare (website hosting, infrastructure, and order storage), and shipping carriers (USPS, UPS) who receive your name and address to deliver your order. Each processes your data under their own privacy policies. We may also disclose information if required by law.
Cookies & local storage
We do not use advertising cookies. Your browser's local storage holds your cart, and session storage holds your age confirmation — both live on your device and can be cleared at any time through your browser settings.
Data retention
Order records are kept as long as needed for accounting, tax, and legal obligations. Newsletter emails are kept until you unsubscribe.
Your rights
You may request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it (subject to legal record-keeping requirements). California residents have additional rights under the CCPA, including the right to know and the right to delete. To exercise any of these, email support@galacticjems.com — we respond within 30 days.
Children
This site is strictly for adults 21 and older. We do not knowingly collect information from anyone under 21.
Changes to this policy
If we make material changes, we will update the date above and note the change on this page.