Privacy Policy

• Account details — your email address, and a name if you provide one. Passwords are stored only as a salted scrypt hash; we never see or store your actual password.
• Sign-in identity — if you sign in with Google or Discord, we receive your verified email address and display name from that provider to create or match your account. We do not post on your behalf or access anything else.
• Order details — the cards you submit, your declared values, order notes, and the shipping address you give us so we can return your cards.
• Support content — messages you send through support tickets or the contact form.
• Photographs — images we take of your cards during the restoration process.
• Basic usage data — aggregate page views used to understand site traffic. We do not use third-party advertising trackers.

• To process, price, and complete your restoration orders.
• To sign you in and keep your account and order history secure.
• To email you about your orders and support tickets. You can turn order update emails off any time in your account settings or from the unsubscribe link in those emails.
• To respond to your questions and requests.

We do not collect or store card or bank numbers on this site. Payments are made directly through third-party services (such as Venmo, PayPal, or Zelle), each governed by its own privacy policy. We only see the confirmation that a payment tied to your order was received.

We share data only with the providers that run the service on our behalf: our hosting and database provider, and our email provider for the account and order messages described above. These providers process data solely to deliver their service to us and are not permitted to use it for their own purposes.

We keep account and order records for as long as your account is active and as needed to provide the service and meet legal or accounting obligations. You can ask us to delete your account and associated personal data at any time (see below); some records may be retained where the law requires it.

• Update your name and email preferences in your account settings.
• Unsubscribe from order update emails at any time.
• Request a copy of your data, or its deletion, by emailing support@thebathhouse.us.

Passwords are hashed, sessions are signed and transmitted over HTTPS, and access to customer data in our admin tools is restricted to authorized staff. No system is perfectly secure, but we take reasonable measures to protect your information.

The service is not directed to children under 13, and we do not knowingly collect their personal information.

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above.

Questions about this policy or your data? Email support@thebathhouse.us, or reach us through our contact page.