Privacy
This site collects almost nothing. What it does collect comes from the contact form, goes straight to a mailbox, and is never sold or shared.
What we collect
Only what you type into the contact form: your name, your email address, the subject you pick, and your message. Nothing else on this site asks you for anything.
We do not run an account system, a cart, a newsletter, a chat widget or an advertising pixel. There is nothing here to log into and nothing to opt out of receiving.
What happens to a contact message
It is passed straight through to our inbox. The website itself stores none of it — there is no database behind this site and the contact endpoint writes nothing to disk.
The one thing that is written is a spam counter: when you submit the form, a one-way SHA-256 hash of your IP address is stored with a number, so the form can refuse more than five submissions an hour from one connection. The hash cannot be turned back into your IP address, it is never attached to your message, and it deletes itself after one hour.
Why we collect it
To answer you. That is the only purpose. We do not use your address for marketing, we do not add it to a list, and we do not use it to build a profile of you.
How long we keep it
We keep a contact message for as long as it takes to answer you, plus a reasonable period afterwards in case you write again about the same thing. In any case we delete messages after 12 months.
The spam counter described above expires after one hour.
Who else sees it
These are the only companies that handle anything of yours, and each one is handling it on our behalf to do a specific job:
- Cloudflare
- Hosts the site, runs the contact endpoint, provides the Turnstile spam check, and stores the rate-limit counter. Receives: Your IP address when you load a page or submit the form, and the Turnstile token.
- Resend
- Delivers the contact form message to our inbox. Receives: Your name, email address, subject and message.
- Hostinger
- Hosts the mailbox the contact form delivers into. Receives: Your name, email address, subject and message, once delivered.
If you buy the seat, that purchase is between you and Amazon. We never see your payment details, your delivery address or your card. Amazon's privacy notice governs that transaction, not this one.
Cookies, and why there is no banner
This site sets no cookies. Not for analytics, not for preferences, not for anything. We currently run no analytics of any kind. If that changes we will use a measurement tool that sets no cookies, and this page will say so before it goes live.
Because nothing here stores or reads a cookie, there is no consent banner on this site. There is nothing for you to accept or decline.
The one exception is a spam check. Submitting the contact form loads Cloudflare Turnstile, which is a privacy-preserving alternative to a CAPTCHA — it does not track you across sites and does not ask you to label photographs.
Do Not Sell or Share My Personal Information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We never have. There is no opt-out link on this site because there is nothing to opt out of — no data broker relationship, no advertising network, no tracking partner.
We also do not collect sensitive personal information as California defines it, so there is nothing to limit the use of.
Your rights, and how to use them
Under the California Consumer Privacy Act as amended by the CPRA, and comparable state laws, you can ask us to:
- Tell you what we hold about you and where it came from.
- Give you a copy of it.
- Correct it if it is wrong.
- Delete it.
- Opt out of sale or sharing — already the default here, as above.
We will never treat you differently for asking. There is no worse service, no different price and no penalty for exercising any of these.
Gemnye is a small company and may fall below the thresholds that make these rights legally mandatory. We honour them anyway, for everyone, wherever you live.
How to make a request
Email contact@gemnyestore.com with "Privacy request" in the subject, or use the contact form and pick "Other". Tell us which of the above you want.
We will confirm we have your request within ten business days and answer it within forty-five days. If it needs longer we will tell you why and take at most another forty-five.
To verify a request we will ask you to reply from the email address in the message you are asking about. That is usually the only identifier we hold, so it is the only one we can match against. An authorised agent may act for you with written permission we can check.
Children
This site is not directed to children. We do not knowingly collect personal information from anyone under 16, and we have no way of doing so beyond the contact form. If you believe a child has sent us something, write to contact@gemnyestore.com and we will delete it.
Security
The site is served over HTTPS. The contact endpoint verifies a spam check server-side, caps the length of every field, and rate limits by connection. Because we store nothing, there is no database of yours to breach.
Changes
If we change what we collect or who handles it, we change this page and move the effective date at the top. Material changes will be described here rather than applied quietly.