Policies
Privacy
This Privacy Policy explains how Cheesy Puffs handles personal information when you browse the store, create an account, contact support, join marketing lists, or place an order.
Information we collect
- Contact information, such as name, email address, phone number, billing address, and shipping address.
- Order information, such as products viewed, products purchased, selected variants, order totals, delivery status, returns, and support history.
- Age and compliance information needed to confirm you are 21 or older and eligible to order.
- Payment-related information processed by payment providers. We do not need to store full card numbers on our own systems.
- Device and usage information, such as IP address, browser, pages viewed, referring pages, cookie identifiers, and site interactions.
- Communications you send to us, including contact forms, support requests, reviews, and marketing preferences.
How we use information
- To operate the store, process orders, collect payment, arrange delivery, and provide order support.
- To verify age, prevent underage access, prevent fraud, and comply with tobacco, nicotine, tax, shipping, and recordkeeping obligations.
- To personalize product browsing, improve site performance, troubleshoot issues, and understand store activity.
- To send order messages, service updates, support replies, and marketing messages where permitted by law and your preferences.
- To protect the rights, safety, property, and security of customers, the store, service providers, and the public.
Cookies and analytics
We use local storage on your device to keep the store working — your cart, your age confirmation, your saved items, your signed-in session, and your analytics choice. These are essential to the site functioning and are not used to track you across other websites.
We use two analytics tools, and they are treated differently:
Cloudflare Web Analytics runs on every page. It is privacy-first, uses no cookies and no client-side state, does not fingerprint or identify visitors, and reports only aggregate page views and page-performance measurements. Because it cannot identify you, it is not something you are asked to consent to.
Google Analytics 4 runs only if you accept it. Nothing loads and nothing is sent unless you choose Accept — if you reject, or simply never answer, the Google tag is never added to the page at all. If you accept, we send page views and shopping events: which product lists and products you viewed, catalog searches you ran, items added to or removed from the cart, checkout steps reached, and completed orders. Each event carries the product, brand, category, selected variant, price, quantity, and order total in US dollars.
We do not send your name, email address, postal address, phone number, payment details, account credentials, or the contents of support messages to Google Analytics or to any other analytics tool.
You can change your analytics choice at any time using the "Analytics preferences" link in the site footer, or from this page. Rejecting analytics does not restrict the store in any way: browsing, search, cart, checkout, payment, order tracking, accounts, and support all work identically either way.
We do not use advertising pixels, remarketing or ad-targeting tags, cross-site trackers, device fingerprinting, heatmaps, or session-replay tools. We do not sell or share personal information for cross-context behavioral advertising.
Your analytics preference
Loading your current preference…
How we share information
We share information only as needed to operate the store, comply with law, protect the business, or complete services you request.
- Payment processors, fraud-prevention providers, age-verification providers, shipping carriers, fulfillment partners, email/SMS providers, analytics providers, and other vendors that support store operations.
- Government, regulatory, tax, law-enforcement, or legal parties when required or reasonably necessary.
- Successors or advisors in connection with a merger, acquisition, financing, reorganization, or sale of business assets.
Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or opt-out of certain uses of your personal information. You may also opt out of marketing messages by using the unsubscribe link or contacting us.
We may need to keep certain information to complete orders, prevent fraud, comply with legal obligations, resolve disputes, and enforce policies.
Data retention
We keep personal information for as long as reasonably needed for store operations, compliance, tax and accounting records, warranty or return handling, fraud prevention, dispute resolution, and legal requirements. We delete or de-identify information when it is no longer needed.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No website, payment system, or delivery process can be guaranteed completely secure, so customers should use strong passwords and protect account access.
Minors
This site is not intended for anyone under 21. We do not knowingly sell products to, collect information from, or market to anyone under 21. If we learn that information was collected from a person under 21, we will take reasonable steps to delete it or restrict it as required.
Contact
For privacy questions or requests, contact us through the Contact page and include enough detail for us to locate your account or order.