Privacy.

Your email address when you join the list, and the house, category, size and note you leave when you tell us what you are looking for. Order data (name, shipping address, and payment details) when a purchase is made.

We also log IP addresses on our forms, briefly, to stop abuse.

One thing at a time: fulfilling orders, writing to people who asked to hear from us, telling you when a piece close to what you described comes through, and rate-limiting form submissions. Nothing else.

Shopify processes payments and manages order fulfilment. Klaviyo holds the list and what you told us you are looking for. Upstash keeps the short-lived rate-limit counters. Vercel hosts the site and its infrastructure.

Order records are kept for as long as tax and accounting law requires. List and wanted-list entries are kept until you unsubscribe or ask us to delete them.

Under GDPR you have the right to access, correct, or delete your data. You can also request a copy, or object to how it is used.

To exercise any of those rights, email hello@copgrail.com. We respond in plain terms.

For details on how cookies are used, see the cookies page.