Basic philosophy and intent:
We treat your personally identifying information (including your name, email address, IP address, information on devices you use to access the site, and credit card payment and address information) as confidential, and we protect it accordingly. We do not do anything with your information that I, Muffy Young, would not expect or agree to have done with my own information when visiting a website and making an online purchase.
- We collect and access your personally identifying information only as required to operate the site, to support your browsing, shopping, and purchasing, and to follow through on completed purchases.
- If you opt into our mailing list we keep your email and/or postal address in order to communicate with you in the future.
- We never sell or rent your personally identifying information to anyone.
- We will not disclose your personally identifying information to anyone unless we are legally required to.
- We work with other services to operate, support, and monitor the website and store. Some of them collect personal data that they may share with us. We describe all this in more detail below.
Some data are under our direct control:
This website resides on a server that is hosted by Digital Ocean. We can access information on that server, as can support personnel working for Digital Ocean. The server keeps a log of every visit to the website, including, if you visit, the IP address of your device and its user agent (technical details about your device, operating system, and browser). This information is used for security and troubleshooting, and is discarded after four weeks.
The content you see on our website is created and maintained using WordPress software. WordPress stores all the data that produces our website—including any comments you add to our blog, “On the Loom”—in a database that is kept on our server at Digital Ocean. If you make a comment on the blog, the database stores:
- The contents of your comment and, if you include them, a display name and URL, which are all immediately made public; and
- The IP address of your device and, if you include it, an email address. These are never made public, but we can access them to contact commenters for clarification or to address other concerns. We may also use IP and email addresses to identify and block users who leave abusive or otherwise inappropriate comments.
- Blog comments usually remain public indefinitely, and if they are removed from the public site for some reason they are still stored in the WordPress database indefinitely to help us manage abusive users and to distinguish real users from spambots. If you would like your comments removed permanently from the site and from the database, please write to us through the contact page.
Payment processing in our web store is handled by Square, and no credit card numbers are ever stored in any database or server that we control or access directly. Square gives me (but not our other site administrators) access to limited data about user credit cards, as described below under Payment Processing.
Some data are collected and controlled by third parties:
Payment processing. If you make a purchase in our web store, your credit card payment will be processed by Square. Square gives me access to the name, billing address, credit card type (AmEx, Visa, etc.), and the last 4 digits of your credit card number. In addition, I will be informed if an attempted charge to a credit card is declined. All of the actual payment information is held by Square; for more information, see Square’s security and privacy policies.
Our site uses both session cookies and persistent cookies; session cookies keep track of you while you navigate the site and persistent cookies enable the site to recognize you when you revisit.
Session cookies are deleted from your computer when you close your browser (end your browsing session). Persistent cookies may remain stored on your computer until deleted, or until they reach a specified expiration date. You can delete any cookie whenever you choose; follow this link to find out more about how to delete cookies from your browser.