Privacy Policy

Cosmic Props is a small workshop in the United States. This page explains what we collect when you use cosmicprops.com (the Greeblenator included), why, and who else handles it. Last updated October 27, 2026.

What We Collect

• Your account: name, email address and password. Passwords are stored scrambled (hashed), never as you typed them. If you sign in with Google, Google shares your name, email and profile picture with us, and we never see your Google password.
• Your orders: what you bought, your shipping and billing address, email, phone number if you give one, and the codes or discounts used.
• Things you save: your cart, favorites, saved addresses, Greeblenator designs, reviews and review photos, back-in-stock requests, and messages you send us.
• Anonymous visit counts and recordings: we use Umami to see which pages are visited and how many people add to cart or check out. For some visits it also records how the page is used (scrolling, clicks and mouse movement), so we can see where the site is confusing. Anything you type is hidden in these recordings, and so are your account, order, checkout and chat pages. It sets no cookies, doesn’t identify you and doesn’t follow you to other sites.
• Basic technical details: like any website, our hosting keeps short-lived logs (for example IP address and browser) to keep the site running and secure.

We don't see or store your card number. Payments are handled entirely by Stripe.

How We Use It

• To make, ship and support your order, and to send receipts and shipping updates.
• To run your account: saved carts across devices, favorites, addresses and downloads.
• To send a few offer emails you can turn off at any time: a reminder about a checkout you left (with a one-time code), a note when a favorite goes on sale, or when something you asked about is back in stock. Every one has an unsubscribe link.
• To prevent fraud and keep the site working.

We don't sell or rent your information, and we don't use advertising or tracking cookies.

Who Else Handles It

We use a few services to run the shop. Each gets only what it needs:

• Stripe processes payments.
• Shippo, USPS and UPS get your name and address to quote shipping and print labels.
• Resend delivers our emails.
• Vercel and Neon host the site, its database and uploaded files.
• Umami counts and records visits anonymously, without cookies. It runs on our own server.

If you buy from us on Etsy or eBay, that marketplace's own privacy policy applies to your purchase. Our site only reads the order number and quantity, to keep our stock count right; it doesn't store your marketplace details.

We may also share information if the law requires it.

Cookies and Your Browser

We use one sign-in cookie to keep you signed in. Your cart is also kept in your browser so it's there when you come back. There are no advertising trackers, and our visit counts (Umami) use no cookies.

How Long We Keep It

Order records are kept as long as we need them for taxes, returns and warranty questions. Account details stay until you ask us to delete your account. Server logs are kept only briefly.

Your Choices

You can update your details and turn off offer emails from your account, or with the unsubscribe link in any offer email. To get a copy of your information or delete your account, use Your Data under Profile & Security, or email hello@mail.cosmicprops.com or contact us. We'll reply within 30 days. When an account is deleted, past orders stay in our books for taxes and returns, but without your name, email or street address, and reviews stay as “A customer”.

Children

The shop isn't meant for children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update the date at the top of this page. For big changes, we'll also email account holders.