Privacy Policy — Draft for Review

Pending operator review: legal entity and controller details, applicable lawful basis, retention schedule, hosting and email processor details, international-transfer arrangements, and jurisdiction-specific rights. This draft does not claim that a legal compliance review has been completed.

Information collected through inquiries

The inquiry form asks for your name, business email, store platform, optional store URL, shipping destinations, and requirements. Your selected product references, optional quantities, and customization preferences are included. Please do not provide payment details, passwords, identification documents, or information about your customers.

How the website uses this information

When you submit the inquiry form, the website server validates your details and sends the inquiry to our designated business mailbox using Google’s Gmail SMTP service. We use this information to review and answer your request. The application does not maintain an inquiry database. Email handling and any later business records require the operator’s confirmed retention and access policies.

Browser storage

Your selected products, optional quantities, and product preferences are stored in your browser’s local storage so the list can persist between pages. Your display theme is also stored there. The form does not save your name, email, or message to local storage. You can remove items or clear browser site data at any time.

Security and operational logs

The inquiry endpoint uses validation, same-origin checks, signed form tokens, a honeypot, and temporary in-memory rate limits. Application submission logs contain a result and reference identifier, not the form body. Hosting and reverse-proxy infrastructure may process IP addresses and request metadata for operation and security. The operator must confirm infrastructure log retention.

Email delivery and service providers

Inquiry messages are sent through Google’s Gmail SMTP service to our business mailbox. Google processes these messages as the configured email service provider. The VPS host and Cloudflare CDN may process request metadata for hosting and security. Provider arrangements, processing locations, retention terms, and any international-transfer arrangements remain subject to the operator’s policy review. A successful form status confirms that the SMTP server accepted the inquiry; it does not prove that the message reached an inbox.

Contact and requests

For questions about your inquiry or to request access, correction, or deletion, contact remy@86drop.com. Applicable rights and response procedures are subject to the final operator and jurisdiction review.

Analytics

No advertising or analytics scripts are installed in the application at launch. If analytics or additional services are introduced, this notice and any required consent controls must be reviewed first.