Legal
Privacy policy
BL4CKOUT collects as little data as possible. Below is exactly what we store, why, and for how long.
What we store
Account details (email, name), orders and shipping addresses, support tickets, store-credit transactions and technical logs (failed logins, admin audit trail). We never see card data — that stays with Stripe.
Why
To process and deliver your orders (performance of contract), manage your account and credit (contract), and prevent fraud and abuse (legitimate interest).
Cookies
Essential cookies are always on: your login session and your cart/wishlist (stored locally in your browser). Anonymous analytics (pageviews, scroll depth, heatmaps from a sample of sessions, search terms) is collected only after you actively opt in — via the banner or Cookie preferences in the footer. Rejecting is as easy as accepting, and you can withdraw at any time.
Analytics & behavioural data
Analytics runs on our own first-party tooling, not ad networks. IP addresses are truncated before storage, sessions use a random anonymous id, form content (passwords, payment details) is never recorded, and behavioural data auto-expires after 12 months. Full IP addresses exist only in security logs for fraud prevention, kept separate from marketing data.
Your rights (GDPR)
From your account you can export all your data (JSON) or request deletion. You can also send a request via the support form; we respond within 30 days.
Retention
Order records are kept for 7 years (tax obligation), support tickets for 2 years after closing, logs for 1 year.