Privacy Policy

This policy explains how Good Riddance Bags (“Good Riddance,” “we,” “us”) collects, uses, and protects your information when you visit goodriddancebags.com or place a pledge. We kept it short and in plain English on purpose.

Information we collect

• You give us: your name, email, billing/shipping address, and what you pledged. If you email us, we keep that correspondence.
• Payment information: handled entirely by Stripe, our payment processor. Your full card number is entered on Stripe's systems and we never see or store it. During a pledge, Stripe securely saves your payment method so it can be charged later only if the drop funds (see our Pledge & Refund Policy).
• Automatically: basic device and usage data (such as IP address, browser type, and pages viewed) and cookies. Strictly-necessary cookies always run; analytics and advertising cookies run only if you accept them in our cookie banner.

How we use it

• To process and fulfill your pledge and order, and to contact you about it.
• To send marketing emails you signed up for (you can unsubscribe anytime).
• With your consent, to measure and improve our advertising and website.
• To prevent fraud and abuse, and to comply with the law.

Where the GDPR applies, our legal bases are: performance of a contract (fulfilling your order), your consent (marketing and analytics/ads cookies), and our legitimate interests (running and securing the business). You can withdraw consent at any time.

Who we share it with

We do not sell or rent your personal information. We share it only with service providers who process it on our behalf under their own privacy terms:

• Stripe — payments and securely-stored payment methods
• Vercel — website hosting
• Upstash — database that stores pledge and email records
• Our email-sending provider — to deliver newsletters and order emails
• If enabled with your consent, advertising/analytics providers such as Meta and Google — to measure ads

We may also disclose information if required by law, or as part of a business transfer (e.g. a merger or sale), in which case we'll tell you.

How long we keep it

We keep pledge and order records as long as needed to run the drop and meet tax and legal obligations, and email-list data until you unsubscribe. You can ask us to delete your data sooner (see below).

Your rights

Depending on where you live (including under GDPR and California's CCPA/CPRA), you may have the right to access, correct, delete, or port your data, to opt out of marketing, and to opt out of the “sale” or “sharing” of personal information. We don't sell your data, so there's nothing to opt out of there. Unsubscribe links are in every email. To make any other request, email hello@goodriddancebags.com — we respond within 30 days and won't penalize you for asking.

Security & international transfers

We use reputable providers and reasonable safeguards to protect your data, though no method of transmission is 100% secure. We operate in the United States; if you visit from elsewhere, your information is processed in the U.S.

Children

This site is not directed to children under 16, and we don't knowingly collect their information. If you believe a child has given us data, email us and we'll delete it.

Changes & contact

If this policy changes materially, we'll update the date above and, where required, notify you. Questions or requests: hello@goodriddancebags.com.