Effective September 15, 2026 / the serious file
YOUR DATA IS NOT A COLLECTIBLE.
Here is the plain-language version of what Sorta Stupid uses to run the store, fulfill orders, and help when a rectangle goes sideways.
What lands on our desk
When you shop or contact us, we may receive your name, email, phone number, billing and shipping details, order contents, support messages, and any artwork you upload. The site also processes basic technical data such as IP address, browser information, request logs, and a cart identifier stored in your browser.
Why we need any of it
We use this information to operate the cart, take payment, create and fulfill orders, provide tracking, prevent fraud and abuse, answer support requests, maintain the site, and comply with legal and accounting obligations.
The necessary grown-ups
We share only the information needed with service providers involved in the transaction: Stripe for payment and checkout, Railway for site hosting, our production partner for printing and fulfillment, USPS for delivery, and technical providers that help us operate and secure the store. Their handling of information is governed by their own terms and privacy policies.
Cards, cookies, and cart memory
Stripe handles payment details; Sorta Stupid does not receive your full card number. The store uses browser storage to remember your cart. We do not sell your personal information.
Optional advertising measurement
If you allow advertising cookies through Privacy choices, Pinterest receives product views, cart actions, checkout starts and completed purchases, including product identifiers, quantities, currency and amounts. Its tag also processes technical information such as browser details, IP address, cookies and Pinterest click identifiers to measure advertising and associate visits with ads. We do not pass customer names, email addresses, postal addresses, uploaded artwork or private order-access links to this tag.
You can decline or withdraw permission using Privacy choices at the bottom of any page. The cart and checkout work without advertising cookies. We respect Global Privacy Control. Browser restrictions and ad blockers may prevent measurement. See Pinterest’s privacy policy for its handling of data.
Optional checkout reminders
If you choose a checkout reminder and allow promotional email in Stripe Checkout, we use your checkout email and saved checkout link to send one reminder if you leave without paying. Resend delivers this email. This permission is separate from advertising cookies. The email includes an unsubscribe link; receipts and shipping updates continue. We keep a suppression record to honor your choice and avoid repeated reminders, and clear expired recovery links.
New-release emails
When you separately sign up for new designs and store news, we save your email address, confirmation status and signup dates. Resend delivers a confirmation email. You join only after confirming, and can unsubscribe through the link in each marketing email. This is separate from checkout reminders and order notifications. Pending requests expire after 48 hours and are removed after 90 days; unsubscribe records are kept to honor your choice.
Our sales report and shared wishlists
With advertising measurement permission, our first-party report records product views, cart actions, checkout starts, and confirmed purchase signals with an anonymous browser-tab identifier and a broad traffic source such as Pinterest or Google. We do not store full referring URLs, email addresses, or private order links in this report. Event records are kept for up to 90 days. We use a keyed hash of network addresses to limit abuse of signup and event endpoints; these short-lived rate-limit records expire after an hour and are removed after one additional day when the endpoints are used.
Saved mats stay in your browser. Sharing a wishlist creates a link containing selected product identifiers; anyone with that link can view the list. The link does not include your name, email address, or order information.
How long it stays
We retain information only as long as reasonably necessary for orders, support, fraud prevention, recordkeeping, and legal obligations. No internet system can promise perfect security, but we limit access and use reputable providers appropriate to the job.
Your information, your questions
You may ask to access, correct, or delete personal information we control by emailing hello@sortastupid.com. Some records may need to be retained for legitimate business or legal reasons. Sorta Stupid is not directed to children under 13.
If this policy moves
We may update this policy as the store or its service providers change. The effective date above will be revised when we do.