Privacy Policy
Last updated: September 2026
1. What We Collect
When you make a purchase, we collect your email address and order details (product purchased, amount paid). If you create an account, we store your email and authentication data. We do not collect or store your card details — payment information is handled entirely by our payment processor.
2. How We Use Your Information
We use your email to send order confirmations, license keys, and download links, and to let you look up past orders. We do not sell your information to third parties.
3. Third-Party Services
We rely on the following services to operate this store:
- Payment processing — Paystack, Flutterwave and PayPal
- Database and authentication — Supabase
- File storage and delivery — Cloudflare R2
- Analytics — Google Analytics (only with your consent)
- Advertising measurement — Google Ads and Meta (only with your consent)
- Transactional email — Resend
- Hosting — Vercel
Each of these providers processes data on our behalf under their own privacy and security practices.
4. Cookies and Local Storage
We use cookies and similar browser storage in three groups. Strictly necessary ones are always on because the store can’t work without them. Analytics and marketing ones are only used if you allow them in our cookie banner. You can change or withdraw your choice at any time using (also in the footer of every page). Withdrawing removes the analytics and marketing cookies we set.
| Name | Purpose | Duration |
|---|---|---|
| Strictly necessary (always on) | ||
| Supabase auth cookies (sb-…) | Keep you signed in | Session / up to 1 year |
| anvil_cart, anvil_bundle_cart (local storage) | Your shopping cart | Until cleared |
| anvil_consent | Remembers your cookie choices | 12 months |
| anvil_geo, anvil_currency_override | Show prices in your currency | Up to 1 year |
| anvil_store_theme | Light or dark theme you picked | 1 year |
| Payment provider cookies | Set by Paystack, Flutterwave or PayPal on their own pages while you pay | Set by the provider |
| Analytics (only with consent) | ||
| anvil_vid, anvil_sid | Our own analytics: count visits and see which pages and products are used | 1 year / 30 minutes |
| anvil_attribution_v1 (local storage) | Which campaign link brought you to the store | Until withdrawn or cleared |
| _ga, _ga_* | Google Analytics | Up to 2 years |
| Marketing (only with consent) | ||
| anvil_aff | Credits the affiliate whose referral link you used for purchases you make | 30 days |
| anvil_aff_click | Stops a refresh of the same referral link being counted as a new click | 30 minutes |
| _gcl_au | Google Ads conversion measurement | 90 days |
| _fbp | Meta (Facebook) ad measurement | 90 days |
Recently viewed products and saved import drafts are kept in your browser’s local storage to power those features and are never sent to advertisers.
5. Your Rights
You may request a copy of the data we hold about you, or request deletion of your account, by contacting us at theanvilstore.com@gmail.com. Note that we retain order records as required for accounting and tax purposes even after an account is deleted.
6. Sellers
If you apply to sell products on The Anvil Store, we additionally collect your business name and contact information to process your application and, if approved, your earnings.
7. Contact
Questions about this policy can be sent to theanvilstore.com@gmail.com.