Privacy Policy

Introduction

This Privacy Policy describes how CaseBlossom ("we", "our", "us") collects, uses and shares information about you when you visit caseblossom.com (the "Site") or place an order. If you do not agree with this policy, please do not use the Site. Any terms not defined here have the meaning given in our Terms of Use.

Information We Collect

Information you provide to us

When you create an account, place an order, submit a review, or send us a message, we collect the information you provide, which may include your name, email address, shipping address, phone number, account password (stored securely in encrypted form), order details, personalization content (such as the text, photos and device model for a custom case), and the content of reviews and messages you submit.

Information we collect automatically

When you visit the Site, we and our service providers may automatically collect certain information about your device and usage, including your IP address, browser type, pages viewed, referring pages, and approximate time zone, via the following mechanisms:

• Cookies and localStorage. We use browser storage to keep your shopping cart, remember your cookie consent and privacy choices, and record affiliate references (a code such as ?ref= used for partner attribution). See the "Cookie Choices" section below.
• Log files. We record site visits (page views and API requests) to operate the Site and to keep our services secure and reliable.
• Website analytics — Google Analytics 4. It counts visits and shows us which pages and product designs people reach, using your device and browser type, a coarse location derived from your IP address, and the pages you view. We do not send Google your name, email address, postal address or card details. When you complete an order, Google receives the order total, currency and the items ordered so we can see which visits turn into sales.
• Advertising measurement — the OpenAI (ChatGPT) pixel. If you arrived from, or may later see, one of our ads shown inside ChatGPT, this tag records that a visit happened and whether it ended in a purchase. The only order information it receives is the amount, the currency, the item names and quantities, and an order reference number used to avoid counting the same purchase twice. It never receives your name, email, shipping address or payment details.

Google Sign-In

When you choose "Sign in with Google", we receive your Google account's name, email address and profile picture — the basic profile information available through the openid, profile and email scopes. We use this information only to create or link your CaseBlossom account, recognize you when you return, and send you order-related communication. We never receive your Google password, we do not post to Google on your behalf, and we do not use this data for advertising or to train AI/ML models.

CaseBlossom's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke CaseBlossom's access to your Google account at any time in your Google Account settings (Security → Third-party apps with account access).

How We Use Your Information

We use the information we collect to:

• process and fulfill orders, including production, payment, shipping and delivery;
• communicate with you about your orders, returns and support requests;
• provide customer reviews and personalize your experience;
• operate, secure and improve the Site;
• attribute sales to affiliate partners who referred you (see "Sharing" below);
• comply with legal obligations and protect our rights.

Sharing of Information

We do not sell your personal information. We share only the information needed to run the store with the following categories of service providers, who are contractually obligated to protect it:

• Payment processors — Stripe (credit/debit cards, ACH, Klarna) and PayPal process your payment details; we never store full card numbers on our servers;
• Affiliate platform — GoAffPro receives order and customer information (such as email and order totals) to attribute affiliate commissions;
• Analytics and advertising measurement — Google (Google Analytics 4) and OpenAI (our ChatGPT ad pixel) receive usage data and, for a completed order, the order amount and item details described above. They do not receive your name, email address, shipping address or payment details, and each processes data under its own privacy terms;
• Email and communication — our email delivery provider sends order confirmations and support correspondence;
• Shipping carriers — receive your name, address and contact details to deliver orders.

Cookie Choices

On your first visit you can choose Accept All or Reject All in our consent banner. Whatever you choose, we keep only what is strictly necessary for the Site to work — such as your cart and your consent preference itself. Accept All lets the analytics and advertising tags described above report your visits. Reject All tells Google and OpenAI not to record your visits, and the cart, checkout and your orders keep working exactly as before, because none of that depends on those tags. If you make no choice, the banner stays up until you leave and those tags run in their default (enabled) state. Both choices are stored on your device, and you can change your preference at any time by clearing your browser storage for this Site.

Data Retention and Security

We retain your information only as long as necessary for the purposes described in this policy — for example, order records are kept to support warranty claims, returns and accounting, and to comply with applicable law. We apply reasonable administrative and technical measures to protect your information, including encrypted password storage and TLS-encrypted connections.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct or delete your personal information, and to object to or restrict certain processing. You can exercise these rights by contacting us at hi@caseblossom.com. We will respond within the timeframe required by applicable law. You may also delete your account at any time by contacting us.

Children

The Site is not directed to children under 18. If we learn that we have collected personal information from a child under 18 without verified parental consent, we will delete it promptly. If you believe we may hold such information, please contact us.

Updates to This Policy

We may update this Privacy Policy from time to time. The latest version is always posted on this page with its "last updated" date. Material changes will be communicated where appropriate.

Contact Us

Questions or requests regarding this policy or your personal information can be sent to hi@caseblossom.com.