Legal
Privacy Policy
Last updated: September 2026
What we collect
When you send an order request, we collect the information you give us — your name, email address, phone number, what you'd like, when you need it, and any details you share. No payment information is entered on this site. If you go on to pay, that's handled by Stripe through a secure link Caroline sends you; we never see or store card numbers.
How we use it
To reply to your request, work out the details with you, and bake what you asked for. If you join our email list, we'll email you when something new comes out of the oven.
Who sees it
Caroline, your baker, and our service providers — Supabase (database), Stripe (payments), Resend (email), Vercel (hosting). We don't sell your information to anyone, ever.
Your choices
You can unsubscribe from email by replying to any of our emails. You can request deletion of your information at any time by emailing Caroline. Records of completed orders are retained for tax purposes (typically 7 years).
Cookies
We use one cookie group: an authentication cookie set by Supabase for the admin area (which only Caroline accesses). The public site sets no cookies of its own — no tracking, no analytics cookies.
Contact
Questions about your data? Reach Caroline via the custom orders form or any prior email thread.