PRIVACY

Only what an order actually needs. When you buy something, that is your email address, your delivery address, and what you bought. When you subscribe to the mailing list, it is your email address alone. When you use the contact form, it is your name, email address and message.

If you reached the store through a tagged campaign link, the name of that campaign is stored alongside the order, so a sale can be credited to the post that caused it. It identifies the link, not you. Section 02 explains how it is carried.

Card numbers are never collected by this site and never reach its servers. Payment details are entered on the payment processor's own hosted page.

Two small first-party cookies are used, and neither carries anything personal. The first is set only if you arrive from a tagged campaign link, and records which link it was — source, medium and campaign name — for 90 days. The second exists only if you use the SIGNAL page, and holds the random token that is your signal identity, for a year. Both are httpOnly, so no script on the page can read them, and neither is readable by any other site.

Traffic is measured with Vercel Web Analytics and Vercel Speed Insights, run by the company that hosts this site. Between them they record page views, the site that referred you, and how quickly pages rendered on real devices. Both are cookieless and neither builds a profile of your browsing elsewhere.

That is the whole list. There are no advertising pixels, no Google Analytics, no Meta or TikTok pixel, and no third-party trackers of any kind. Nothing collected here is sold or passed to an advertising network.

Typefaces are self-hosted and served from this domain, so loading a page makes no request to a font provider. Your cart is stored in your own browser and is never transmitted anywhere until you check out.

Only the processors required to complete what you asked for:

Order records are kept as long as needed to support the order and to meet accounting obligations. Mailing list entries are kept until you unsubscribe — every email carries an unsubscribe link, and unsubscribing removes the address rather than flagging it.

Contact form messages are kept until the matter is resolved and for a reasonable period afterwards, in case you follow up on the same reference.

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Write by email at support@mercyexe.com and it will be answered within 30 days.

Deletion cannot always be immediate or total: records tied to a completed sale may need to be retained for tax and accounting purposes, and the payment processor holds its own transaction records under its own policy. You will be told exactly what was removed and what had to be kept.

The data controller for this site is CHAPEL 55 LLC.

This policy was last reviewed on 2026-09-03.