Privacy

What we collect

When you place an order:

• Your name and email address — to send the receipt and status updates.
• Your shipping address — to get the parcel to you and to calculate sales tax.
• What you ordered, including any custom text you asked us to print.

That’s the whole list. There are no customer accounts, no passwords, and no profile built up across visits.

Your card details

We never receive them. Payment happens on Stripe’s hosted checkout page, and Stripe tells us only that a payment succeeded, plus the last four digits and card brand for our records. If you want to know how Stripe handles it, read the Stripe privacy policy .

Children

We don’t ask about them. Everything ships to an address, so there is no student name, grade or teacher anywhere in an order — we removed school-office pickup and that information went with it. This site is intended for adults placing orders, and nothing here is collected from a child.

Who else touches your information

We use a small number of services to run the shop. Each one sees only what it needs, and none of them are allowed to use your information for their own purposes:

• Stripe — takes the payment and calculates sales tax.
• Google Firebase — stores the order records and product catalog.
• Netlify — hosts and serves the site.
• Resend — delivers the receipt and status emails.
• The carrier — gets your name and address so the parcel can be delivered.

No school or organization receives your details. We may tell them how much their designs raised, which is a number, not a list of who bought what.

We do not sell your information, rent it, or hand it to advertisers. We’d disclose it if the law genuinely required it, and that’s the only exception.

Cookies and tracking

Your shopping cart is kept in your own browser’s local storage so it survives a page reload. It never leaves your device until you check out. Stripe sets its own cookies on the checkout page for fraud prevention.

There are no advertising trackers, no third-party analytics pixels, and nothing following you to other sites.

How long we keep it

Order records are kept as long as we need them for accounting, tax and dispute purposes — generally seven years, which is what tax record-keeping expects.

Your choices

Email orders@bcashirts.com and we’ll do any of the following:

• tell you exactly what we hold about you
• correct anything wrong
• delete it, except where we’re required to keep the transaction record for tax purposes
• stop emailing you anything other than transactional order updates

We don’t run a marketing list, so there’s nothing to unsubscribe from — the only email you get from us is about an order you placed.

Security

The site is served over HTTPS. Order records are stored in Firebase with access rules that keep them unreadable from the public site — even your own order is only retrievable by entering both the order number and the email address it was placed with. Card data never reaches our systems at all, which is the strongest protection available for it.

Changes

If this policy changes, the date at the top of this page changes with it. Material changes will be noted on the site.

The game

If you post a score to the Trojan Run leaderboard, we store the three letters you choose, the score, and how long the run lasted. We do not store your name, your email, or your IP address. To stop one person filling the whole board we keep a scrambled, one-way fingerprint of the connection the score came from — it cannot be turned back into an address, and it is used for nothing else. Playing without posting a score sends us nothing at all; your personal best is kept in your own browser.