1. Information We Collect

Merch4You prioritizes minimal data collection. When you purchase as a guest, we gather only what is strictly required to execute and dispatch your order:

• Contact Information:: Full name and email address to transmit automated order confirmation codes, live dispatch tracking feeds, and customer service communication.
• Delivery Coordinates:: Physical street address, apartment/suite number, city, state, postal code, and country for carrier routing (USA & Mexico).
• Technical Telemetry:: Anonymized visit counters, clicked items, and IP address for anti-fraud scoring and region routing.

2. Payment Information & Stripe Tokenization

All payment transactions are handled directly through Stripe, Inc., a certified PCI-DSS Level 1 Service Provider (the most stringent security standard in the global payments industry).

When entering card details, data is submitted directly to Stripe's secure vault through client-side encryption. Merch4You never sees, handles, or stores your credit/debit card numbers, expiration dates, or CVV security codes.

3. Data Sharing & Logistics Infrastructure

We do not sell, license, lease, or rent customer personal data to advertisers, data brokers, or external marketing entities under any circumstance.

Personal data is shared strictly with essential infrastructure partners:

• Logistics Couriers:: USPS, FedEx, DHL Express, and Estafeta Priority solely to generate dispatch labels and deliver your package.
• Database Infrastructure:: Supabase PostgreSQL (encrypted in transit and at rest) to preserve order histories and live tracking status.

4. Cookies & Local Storage Optimization

We utilize local browser storage (localStorage) exclusively for operational convenience:

• Maintaining your active shopping bag contents (m4y_cart).
• Remembering your interface appearance preference (m4y_theme: light or dark mode).
• 0ms instant catalog loading and language preferences (m4y_lang).