Privacy

What we do with what you tell us

The shop runs on a handful of details: an email for the newsletter, a name and a phone number for a class, an address for a parcel. Here is where each one goes, who else touches it, and how to have it taken down.

The short version

We ask for little, and we do not sell any of it.

We collect what you hand over on a form, plus the ordinary traces any website leaves. We do not sell your information, and we do not hand it to anyone who wants to build their own list from it.

What we do share is narrower and worth saying plainly: the companies below run the shop for us, and advertising and analytics tags from Google run on every page, which means Google sees that a browser visited. The cookie section explains the available controls and their limits.

Questions, corrections, or a request to delete something: email store@emerysplayhouse.com. It reaches the shop, and a person answers.

Payment

Card numbers never reach this site. Checkout hands you to Square’s own payment page, and the card details stay there.

What you tell us

Every form on the site, and what it asks for.

Nothing here is collected quietly. Each of these is a box you filled in.

Newsletter: Your email address, and your first name if you add one. It goes to Resend, the service that sends Notes from the Playhouse, and it is used for that letter. Every issue carries an unsubscribe link.
Playhouse Perks: Your phone number, your name and your email. The phone number is the one that finds your stars at the register, so it goes to Square, which runs the loyalty program and holds the balance. Checking your stars sends the phone number to Square and brings back a count, nothing more.
Event and class signups: Your name, email, phone and how many people are coming, plus whatever you write in the notes box, which is usually your kids’ names and ages and anything we should know about allergies. It is saved to our database so we know who is coming, and your email brings you a confirmation. If the signup is a paid one, Square gets your name, email and phone to raise the invoice.
Party inquiries: Your name and email, your phone if you add it, the day and package you have in mind, a rough headcount and theme, and whatever you write in the note. Resend carries it to the shop’s inbox as an email so we can write back. We don’t save it anywhere else or add it to any list. The form asks nothing about your kid.
Tell me when it is back: An email address and the size you are waiting on. We watch for that size for up to 90 days and send one email if it comes back. The request is deleted 90 days after that email or after it expires unfilled. It does not join any mailing list.
Checkout: Your name and email, your phone if you are shipping or if you add it, and for a shipment the delivery address. Payment happens on Square’s own checkout page, so your card number is entered there and never reaches us. We keep the order, what was in it, and where it went.
Find your order: The order number and the email on it, so we can show you that one order. Your browser keeps a short-lived cookie afterwards so a refresh still shows the right receipt.

Kids

What we hold about your kid, and what we don’t.

The only details we have about a child are the ones a grown-up types into an event signup: usually a first name, an age, and a note about an allergy. We ask for them so the right number of chairs and the right snack are out, and we wipe them 30 days after the event.

They are never put in an email, never sent to Square or to an advertiser, and they are not part of the newsletter list. The party inquiry form asks nothing about your kid, so anything about them in its note is only what you chose to tell us. Staff can download a class list to run the class, which is a copy that lives on a laptop rather than in the sweep above.

This site is written for the grown-ups. We do not ask children to sign up for anything, and nothing here is aimed at collecting information from a child directly.

Who else handles it

The companies the shop runs on.

These services handle different parts of a visit, signup or order.

Square: Takes payment, holds the catalog, runs Playhouse Perks, and raises invoices for paid signups. Card details are entered on Square’s page, not ours.
Resend: Sends the email: confirmations, receipts, the “ready to grab” note, the newsletter, and a party inquiry on its way to our inbox. It holds the newsletter list.
Supabase: Hosts the database where event signups and storefront orders are stored.
Vercel: Runs the site itself, so every request passes through it, and its analytics measure page views and how quickly pages load.
Upstash: Holds the short-lived counters that stop a form being hammered. They include the IP address the request came from and expire within the hour.
Google: Runs our ads and measures them, shows a store badge and counts views and clicks on it, checks a shipping address against USPS records before we take an order for it, shows the map on the contact page, and hosts the shop’s email. See cookies below.
EasyPost: Quotes and buys postage using the delivery name and address, your email, and your phone number if you supplied one.

Cookies and measurement

What gets set in your browser.

Measured on a first visit, with nothing signed in and no form filled.

Google Ads: _gcl_au remembers that an ad brought you here, so we can tell that an ad led to an order, a call, a request for directions or a party inquiry. It learns that something happened, never what you typed. Google’s tag also tells Google you visited, which is what lets us show our own ads to people who have been here before.
Google Analytics: _ga and _ga_TMX040S7QY count visits and pages so we can see which parts of the site get used. They last about thirteen months.
The shop itself: Your cart lives in your own browser under ep-store-cart:v1, alongside small markers that stop a single order being counted twice. They are not sent to us as cookies, and clearing your browser data clears them.

We do not use a cookie banner, so these tags do not wait for consent here. Google’s ad settings let you turn off personalized ads, but do not stop advertising measurement. Google’s opt-out add-on covers Google Analytics, not the other services on this page. A browser blocker may stop tags loading, depending on its settings. Private browsing alone does not stop collection. You can read how Google uses information from sites like ours.

We remove private link details and search terms from the URLs sent to Vercel Web Analytics. Vercel Speed Insights, which measures page loading, currently receives the full page address, including those details. The confirmation link in your signup email opens your booking until 30 days after the event, and the link Square sends you back through after paying works for a day, so please do not forward either one. Opening one, or finding your order through lookup, leaves a cookie in your browser for an hour so a refresh still shows the right page.

How long we keep it

Some of it clears itself. The rest waits for you to ask.

Event notes: Everything in the notes box, which is where kids’ names and ages live, is wiped 30 days after the event has happened.
Party inquiries: An inquiry is an email in the shop’s inbox, and it stays there as our record of the conversation until you ask us to remove it.
Back-in-stock requests: Deleted 90 days after we email you, or 90 days after the request runs out unfilled.
Signups and orders: The rest of an event signup, and storefront orders with their delivery addresses, are kept as the shop’s own record until you ask us to remove them.
The newsletter list: Unsubscribing stops the letter and takes you off the list. The address itself stays in Resend, so ask us if you want it gone altogether.
Our own housekeeping: The log of what staff did in the back office clears itself after 90 days. Server logs live with Vercel on its own schedule.

Your choices

What you can do, and what to ask us for.

You can unsubscribe from the newsletter with the link at the foot of any issue and leave a waitlist using the link in your waitlist email. To cancel a confirmed event booking, email store@emerysplayhouse.com. You can clear the cookies above from your browser at any time.

For everything else, email store@emerysplayhouse.com: a copy of what we hold, a correction, or a deletion of your details. Deleting takes a person going through the records by hand, so give us a few days. If the request is about an order, we may have to keep the sales record itself for the books.

We sell and ship inside the United States only, and the shop is in Saint Paul, Minnesota. Whichever state you are in, ask and we will do it.

Getting in touch

Emery’s Playhouse, 1326A Grand Ave, Saint Paul, MN 55105. Email store@emerysplayhouse.com, or use the contact page.

Keeping it safe

The care we take, said honestly.

The site is served over HTTPS, payment happens on Square, and the back office is behind a staff login where each person sees only the part of the shop they work on.

Nobody can promise a site is never breached. If something does go wrong with your details, we will tell you what happened rather than let you find out elsewhere.

Last reviewed October 1, 2026. When what we collect changes, this page changes with it, and this date moves.

P.S.

Short version: an email for the letter, a name for the class, an address for the parcel. Anything else, just ask.