Privacy
Account data
We store your name, email, password hash, and session. Orders store the email used at checkout, totals, and payment references.
Codes
Inventory codes are encrypted at rest. They are shown only to the customer on a paid order, or through a one-time order link. They are not placed in search indexes.
Payments
Card details are handled by Stripe when Stripe is configured. Northline stores payment status and identifiers, not card numbers.
Transactional email covers verification, password reset, and delivery. Until a provider key is set, local development prints non-sensitive messages to the server log and omits code bodies.