Legal
Privacy Policy
Last updated: May 2026
What we collect
When you place an order or submit a custom-order request, we collect the information you give us — your name, email address, phone number, and any details you share about your event. Payment information is collected and processed by Stripe; we never see or store card numbers.
How we use it
To bake your order, contact you about pickup, send you a reminder on Thursday morning, and respond to custom-order inquiries. If you join our email list, we'll email you when each week's menu opens.
Who sees it
Caroline, your baker, and our service providers — Supabase (database), Stripe (payments), Resend (email), Vercel (hosting). We don't sell your information to anyone, ever.
Your choices
You can unsubscribe from email by replying to any of our emails. You can request deletion of your information at any time by emailing Caroline. Order records are retained for tax purposes (typically 7 years).
Cookies
We use one cookie group: an authentication cookie set by Supabase for the admin area (which only Caroline accesses). The public site uses browser localStorage to remember your cart while you're shopping — no tracking, no analytics cookies.
Contact
Questions about your data? Reach Caroline via the custom orders form or any prior email thread.