Privacy
What we do with what you tell us
The shop runs on a handful of details: an email for the newsletter, a name and a phone number for a class, an address for a parcel. Here is where each one goes, who else touches it, and how to have it taken down.
The short version
We ask for little, and we do not sell any of it.
We collect what you hand over on a form, plus the ordinary traces any website leaves. We do not sell your information, and we do not hand it to anyone who wants to build their own list from it.
What we do share is narrower and worth saying plainly: the companies below run the shop for us, and advertising and analytics tags from Google run on every page, which means Google sees that a browser visited. The cookie section explains the available controls and their limits.
Questions, corrections, or a request to delete something: email store@emerysplayhouse.com. It reaches the shop, and a person answers.
Payment
What you tell us
Every form on the site, and what it asks for.
Nothing here is collected quietly. Each of these is a box you filled in.
- Newsletter
- Your email address, and your first name if you add one. It goes to Resend, the service that sends Notes from the Playhouse, and it is used for that letter. Every issue carries an unsubscribe link.
- Playhouse Perks
- Your phone number, your name and your email. The phone number is the one that finds your stars at the register, so it goes to Square, which runs the loyalty program and holds the balance. Checking your stars sends the phone number to Square and brings back a count, nothing more.
- Event and class signups
- Your name, email, phone and how many people are coming, plus whatever you write in the notes box, which is usually your kids’ names and ages and anything we should know about allergies. It is saved to our database so we know who is coming, and your email brings you a confirmation. If the signup is a paid one, Square gets your name, email and phone to raise the invoice.
- Tell me when it is back
- An email address and the size you are waiting on. We watch for that size for up to 90 days and send one email if it comes back. The request is deleted 90 days after that email or after it expires unfilled. It does not join any mailing list.
- Checkout
- Your name and email, your phone if you are shipping or if you add it, and for a shipment the delivery address. Payment happens on Square’s own checkout page, so your card number is entered there and never reaches us. We keep the order, what was in it, and where it went.
- Signing in or creating an account
- If you use the sign-in or sign-up pages, Clerk handles the account details and verification information you provide there. You do not need an account to shop or book an event.
- Find your order
- The order number and the email on it, so we can show you that one order. Your browser keeps a short-lived cookie afterwards so a refresh still shows the right receipt.
Kids
What we hold about your kid, and what we don’t.
The only details we have about a child are the ones a grown-up types into an event signup: usually a first name, an age, and a note about an allergy. We ask for them so the right number of chairs and the right snack are out, and we wipe them 30 days after the event.
They are never put in an email, never sent to Square or to an advertiser, and they are not part of the newsletter list. Staff can download a class list to run the class, which is a copy that lives on a laptop rather than in the sweep above.
This site is written for the grown-ups. We do not ask children to sign up for anything, and nothing here is aimed at collecting information from a child directly.
Who else handles it
The companies the shop runs on.
These services handle different parts of a visit, signup or order.
- Square
- Takes payment, holds the catalog, runs Playhouse Perks, and raises invoices for paid signups. Card details are entered on Square’s page, not ours.
- Resend
- Sends the email: confirmations, receipts, the “ready to grab” note, the newsletter. It holds the newsletter list.
- Supabase
- Hosts the database where event signups and storefront orders are stored.
- Vercel
- Runs the site itself, so every request passes through it, and its analytics measure page views and how quickly pages load.
- Upstash
- Holds the short-lived counters that stop a form being hammered. They include the IP address the request came from and expire within the hour.
- Clerk
- Powers the sign-in pages. Nothing on the public site needs an account, and signing in unlocks nothing here, but Clerk loads on the home, information and sign-in pages and can set cookies there.
- Runs our ads and measures them, checks a shipping address against USPS records before we take an order for it, and shows the map on the contact page. See cookies below.
- EasyPost
- Quotes and buys postage using the delivery name and address, your email, and your phone number if you supplied one.
Cookies and measurement
What gets set in your browser.
Measured on a first visit, with nothing signed in and no form filled.
- Google Ads
_gcl_auremembers that an ad brought you here, so we can tell that an ad led to an order. Google’s tag also tells Google you visited, which is what lets us show our own ads to people who have been here before.- Google Analytics
_gaand_ga_TMX040S7QYcount visits and pages so we can see which parts of the site get used. They last about thirteen months.- Clerk
__clientand__client_uatkeep track of whether a browser is signed in. Cloudflare also sets cookies to protect the sign-in service from bots and abuse.- The shop itself
- Your cart lives in your own browser under
ep-store-cart:v1, alongside small markers that stop a single order being counted twice. They are not sent to us as cookies, and clearing your browser data clears them.
We do not use a cookie banner, so these tags do not wait for consent here. Google’s ad settings let you turn off personalized ads, but do not stop advertising measurement. Google’s opt-out add-on covers Google Analytics, not the other services on this page. A browser blocker may stop tags loading, depending on its settings. Private browsing alone does not stop collection. You can read how Google uses information from sites like ours.
We remove private link details and search terms from the URLs sent to Vercel Web Analytics. Vercel Speed Insights, which measures page loading, currently receives the full page address, including those details. Event confirmation links and direct private order links can reveal details to anyone holding them, so please do not forward them. Receipts opened through order lookup also need a short-lived cookie in your browser.
How long we keep it
Some of it clears itself. The rest waits for you to ask.
- Event notes
- Everything in the notes box, which is where kids’ names and ages live, is wiped 30 days after the event has happened.
- Back-in-stock requests
- Deleted 90 days after we email you, or 90 days after the request runs out unfilled.
- Signups and orders
- The rest of an event signup, and storefront orders with their delivery addresses, are kept as the shop’s own record until you ask us to remove them.
- The newsletter list
- Unsubscribing stops the letter and takes you off the list. The address itself stays in Resend, so ask us if you want it gone altogether.
- Our own housekeeping
- The log of what staff did in the back office clears itself after 90 days. Server logs live with Vercel on its own schedule.
Your choices
What you can do, and what to ask us for.
You can unsubscribe from the newsletter with the link at the foot of any issue and leave a waitlist using the link in your waitlist email. To cancel a confirmed event booking, email store@emerysplayhouse.com. You can clear the cookies above from your browser at any time.
For everything else, email store@emerysplayhouse.com: a copy of what we hold, a correction, or a deletion of your details. Deleting takes a person going through the records by hand, so give us a few days. If the request is about an order, we may have to keep the sales record itself for the books.
We sell and ship inside the United States only, and the shop is in Saint Paul, Minnesota. Whichever state you are in, ask and we will do it.
Getting in touch
Keeping it safe
The care we take, said honestly.
The site is served over HTTPS, payment happens on Square, and the back office is behind a staff login where each person sees only the part of the shop they work on.
Nobody can promise a site is never breached. If something does go wrong with your details, we will tell you what happened rather than let you find out elsewhere.
Last reviewed September 17, 2026. When what we collect changes, this page changes with it, and this date moves.
P.S.
Short version: an email for the letter, a name for the class, an address for the parcel. Anything else, just ask.
