Privacy.

We collect email addresses when someone subscribes to the newsletter. We collect order data — name, shipping address, payment details — when a purchase is made. We log IP addresses on the newsletter endpoint to prevent abuse.

That information is used for one thing at a time: fulfilling orders, sending newsletters to people who asked for them, and rate-limiting form submissions. Nothing else.

Three services handle this data on our behalf. Shopify processes payments and manages order fulfillment. Klaviyo handles the newsletter when a subscription is active. Vercel hosts the site and its infrastructure.

Order records are kept for as long as tax and accounting law requires. Newsletter subscriptions are kept until you unsubscribe.

Under GDPR you have the right to access, correct, or delete your data. You can also request a copy, or object to how it is used.

To exercise any of those rights, email hello@copgrail.com. We respond in plain terms.

For details on how cookies are used, see the cookies page.