Privacy notice · Development draft

Collect only what the product needs

The development site stores account, alpha-interest, contact, support, cart, consent, security, and transaction-state records needed to operate its workflows.

Passwords are stored only as modern one-way hashes. Session tokens are stored only as SHA-256 hashes. Client addresses are hashed before storage. Payment card data is never accepted here; future payments will use Stripe-hosted Checkout. Final child-account consent, retention, regional rights, and production contact details require legal review before public launch.

● Not a final legal notice · Data collection remains development-only