Joy’s Store / Privacy
Privacy at Joy’s Store
This portfolio store uses sample products, simulated orders and Stripe test payments. No real money is charged and nothing is shipped. Use fictitious checkout details.
Google sign-in
Google shares your account identifier, name, email address, email verification status and profile image when available. We use this information to recognize your account, sign you in and display your name. We request only basic identity, email and profile access.
Account records also contain provider identifiers and sign-in tokens. Stored OAuth access and refresh tokens are encrypted. Session records can include an IP address, browser details and expiry time.
Your account and orders
Shopper and merchant access are separate. Shopper sign-in does not grant merchant access. An approved merchant must sign in with GitHub before linking a Google account.
New orders placed while signed in are associated with that shopper account. Earlier guest orders are not imported. We store products, quantities, prices, shipping method, totals, payment status and payment references to provide receipts and recover test payments. The authorized merchant can review these order records.
The sample checkout uses the address and contact details you enter during that checkout; it does not save them in the store’s order database. Information entered on Stripe’s hosted test checkout is processed by Stripe.
Cookies and browser storage
Cookies keep you signed in and restrict access to receipts. Shopper and merchant sessions last eight hours. Signing out revokes the selected session.
A guest receipt cookie lasts 30 days and is refreshed during checkout. Browser storage keeps your cart and checkout recovery information. Signing out does not remove that cookie or clear the cart and recovery information. Clearing browser data can remove access to guest receipts.
How long information remains
Resolved order receipts are available for 30 days after purchase or payment resolution. Scheduled cleanup removes expired order records. Unresolved Stripe test orders remain while payment is pending or needs review.
Account identities and linked provider records remain until the store owner processes a deletion request. They are not automatically deleted when an order expires. Expired sessions and temporary sign-in state are cleaned up separately.
Services used by the store
Vercel hosts the storefront and API. Neon stores account, session and order records. Google provides sign-in. Stripe hosts test checkout and processes sandbox payment information. These services receive information needed to provide those features and may maintain their own operational records.
Questions and account deletion
Contact the store owner at joydas.0111@gmail.com for privacy questions or to request account deletion. Deletion requests are handled manually; there is no self-service deletion screen.
Signing out or removing the app’s access in Google does not itself delete information already stored by the store.