Privacy Policy
Last updated: February 23, 2026
This Privacy Policy describes how LobsterKit ("we", "us", or "our") collects, uses, and protects your information when you use our website lobsterkit.sh and purchase our products.
1. Information We Collect
We collect minimal information necessary to fulfill your order:
- Email address — To send order confirmations, download links, and shipping updates
- Shipping address — For physical product delivery (LobsterKit orders only)
- Name — As provided during checkout
We do not collect:
- Passwords or account credentials (we have no user accounts)
- Payment card details (handled entirely by Stripe)
- Browsing behavior or analytics data
- Device fingerprints or advertising identifiers
2. How We Use Your Information
Your information is used solely for:
- Processing and fulfilling your order
- Sending order confirmation and download links
- Providing shipping updates and tracking information
We do not use your information for marketing, advertising, profiling, or any purpose other than order fulfillment.
3. Third-Party Services
We use the following third-party services to operate:
- Stripe — Payment processing. Stripe handles all payment card information and is PCI DSS compliant. See Stripe's Privacy Policy.
- Supabase — Database storage for order records. Data is stored in Supabase's secure cloud infrastructure.
- Resend — Transactional email delivery. Used to send order confirmations and download links.
We do not share your information with any other third parties.
4. Cookies and Tracking
We do not use cookies, tracking pixels, analytics tools, or any form of user tracking on our website. We do not use Google Analytics, Facebook Pixel, or similar services.
5. Data Retention
We retain order records (email, shipping address, order details) for as long as necessary to fulfill our legal and business obligations. Download links expire after 72 hours.
6. Data Security
We implement appropriate security measures to protect your information:
- All data transmitted via HTTPS
- Payment processing handled by PCI-compliant Stripe
- Database access restricted to service-level keys
- Row-level security enabled on all database tables
7. Your Rights
You may request deletion of your personal data by contacting us at privacy@lobsterkit.sh. We will process your request within 30 days.
8. Children's Privacy
Our products are not intended for children under 13. We do not knowingly collect information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes become effective upon posting to the Site.
10. Contact
For privacy-related questions, contact us at privacy@lobsterkit.sh.