Privacy policy.

What we collect when you order

When you place an order, we collect your name, email address, shipping address, the items you bought and the amount paid. We use them to pack and ship your order, email your receipt, answer questions about the order, and handle returns. Each order is kept in a protected order record on our web server, which the public cannot reach.

We do not receive or store your card number. See "Payments" below.

Payments (Stripe)

Card payments are handled by Stripe, Inc. The card number, expiration and security code fields on our checkout page are hosted by Stripe inside our page. What you type there goes straight to Stripe and never passes through or rests on our server. We send Stripe your name, email address, shipping address, billing ZIP code, the items in your order and the order amount so it can process the payment, prevent fraud and email you its payment receipt. Stripe may set its own cookies and collect device information for fraud prevention. Stripe's privacy policy: https://stripe.com/privacy.

Contact form

If you use our contact form, we collect your name, email address, your message, and the IP address your message came from. These are emailed to our support inbox so we can reply. We use them only to answer you.

How long we keep it

Order records: we keep them for 7 years for tax and accounting.

Contact-form messages: we keep them in our support inbox for 90 days and then delete them.

Technical logs: kept only as long as we need them to fix problems.

Our own order receipts and order notices are sent only from our prairiefill.com mail server. Stripe also emails its own payment receipt, as described under "Payments".

Security checks (Cloudflare)

Our site runs behind Cloudflare, Inc., which protects it from attacks and automated abuse. Before you pay or send a contact message, we show Cloudflare Turnstile, a security check that tells people from bots. To do this, Cloudflare processes information about your browser and device, such as your IP address and browser signals. Cloudflare also runs its own security scripts on our pages and may set cookies needed for that protection. Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/.

Analytics (Google Analytics 4)

We use Google Analytics 4, a service from Google LLC, to understand how visitors use the site. Examples are which pages are viewed, which products are added to the cart, when checkout starts, and when an order is completed. Google Analytics sets cookies (named _ga and _ga_…) in your browser and collects information such as pages visited, approximate location, device and browser type. When an order is completed, we send Google Analytics the order number, the items and the order total. We do not send your name, email, address or payment details to Google Analytics.

You can opt out of Google Analytics on all websites with Google's browser add-on: https://tools.google.com/dlpage/gaoptout. Blocking or deleting cookies in your browser also stops it on our site. How Google uses this data: https://policies.google.com/technologies/partner-sites.

Storage in your browser

Your shopping cart is kept in your own browser's local storage so it survives page reloads. After checkout, your browser briefly keeps your email address (in session storage) so the thank-you page can show where the receipt went. It is removed when that page loads.

Server logs

Our server keeps short technical logs of checkout and security events, such as a failed security check or a payment that could not start. They help us fix problems. These logs hold payment IDs, order amounts and reason codes, not your name, email address, shipping address or card details.

What we share

We never sell or rent your personal information, and we never share it with third parties for their own marketing. We share it only with the services above (Stripe, Cloudflare, Google Analytics, our web host and mail server), only so they can run the site for us, and when the law requires it.

Your choices

You can ask what personal information we hold about you, or ask us to correct or delete it, by emailing support@prairiefill.com. We may need to keep order records the law requires us to keep. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics as described above.

Children

Our site is not directed to children under 13, and we do not knowingly collect their information.

Changes

If we change this policy, we will update the date at the top of this page.