What is kept, and what is not
The site is built so that ordering without an account is a real option rather than a worse one. That shapes what gets collected.
If you order as a guest
We hold the shipping address, the email, an optional phone number, what you ordered, and the receipt you uploaded. That is what is needed to pack a parcel, match a payment and answer a question about it later.
There is no account, no password and no profile. The order reference is the only key to it, which is why it is worth keeping and why it is not recoverable from anywhere else.
If you create an account
The same information, plus a password stored as a salted scrypt hash. The plain password is never written down anywhere and cannot be read back out, including by us.
Registering with the email you used as a guest links those past orders to the account. Nothing else changes.
Proof of payment
Receipts you upload are stored privately and are readable only by the site administrator. They are never served from a public URL and never shown to another customer.
What is not done
No advertising trackers, no analytics that follow you across other sites, no selling or sharing of a customer list, and no marketing email you did not ask for. Emails from this site are about an order you placed.