Privacy Policy

1. What we collect & why

We do not sell personal data.

Merch pre-orders. If you pre-order a jersey, we keep your name, email address, delivery address, phone number (if you give one), size and chosen word. We use them only to make and deliver your order and to handle refunds or questions about it, under our contract with you. Stripe processes your payment, and we may email you about your order through our email delivery service. We delete delivery addresses and phone numbers 90 days after the edition ships, and keep the rest of the order record for our accounts.

2. Cookies

• Session cookie (ssid) keeps you logged in.
• Optional analytics cookies set by Google Analytics if you consent.

3. Third-party processors

4. Data retention

• Account data – until you delete your account or after 3 years of inactivity.
• Log files – 30 days.
• Dictionary entries – retained indefinitely but decoupled from your email once you delete your account.

5. Your rights

• Access, rectify, delete or export your data.
• Object to processing for analytics.
• Withdraw consent at any time (settings → privacy).

Email privacy@shonaslang.com to exercise these rights.

6. Security

We use bcrypt hashing, HTTPS everywhere, and least-privilege access controls.

7. International transfers

Data may be stored on servers outside your country. We rely on standard contractual clauses where required.

8. Children

shonaslang is not directed at children under 13. We will delete data from a minor upon verified parental request.

9. Changes to this Policy

We'll notify users by email or banner for significant updates.

10. Contact

privacy@shonaslang.com