Privacy.

What this covers

This explains what happens to your information when you use Sabr Kollective. It describes what this shop actually does — not what a shop like it might do — so if something is not listed here, it is not happening.

There is no advertising on this site, no tracking pixels and no advertising cookies, and nothing you do here is shared with an advertiser or a data broker. There is analytics, including a recording of how you use the site, and it starts when a page loads without asking you first. This page is where we tell you about it — there is no banner. You can ask us to delete the recordings of your visits at any time, and they are deleted automatically after fourteen days. Cookies and analytics below says exactly what runs, what it records and what it cannot see.

What we collect, and why

When you place an order: your name, email address, delivery address, billing address and phone number. The phone number is asked for because couriers to several of the countries we post to require one for delivery. All of it exists so we can send you the right thing to the right place and talk to you if something goes wrong.

When you create an account: your email address, and a password if you choose to set one. Sign-in is handled by Clerk, and your password is never seen by or stored on our systems.

When you contact us or open a support ticket: your name, email address and whatever you write to us.

When you subscribe to the newsletter: your email address, and nothing else.

We never see or store your card details. Payment happens on Stripe's own pages, and what comes back to us is a confirmation that you paid, the amount, and the address you gave.

Who else handles it

Running a shop means using other companies for parts of it. Each of these receives only what it needs to do its job:

Stripe — takes the payment and holds the card details. Also provides the billing portal where you can see your own receipts.

Clerk — handles sign-in, passwords and email verification.

Neon — hosts the database where your orders, addresses, support conversations and our own session recordings are stored.

Resend — delivers our email to you. It sees the address it is sending to and the contents of that message.

Vercel — hosts the site itself and keeps short-lived server logs.

Microsoft — provides Clarity, which records how the site is used and produces heat maps of it; see Cookies and analytics below. It receives the pages you view, where you click and scroll, and your approximate location and device, from your browser directly.

Cloudflare — runs the service that stores our own usage analytics.

Your delivery address is also given to the carrier that brings you the parcel, because that is what a delivery is.

How long it is kept

Orders are kept indefinitely. That is deliberate and it is not negotiable on our side: a record of a sale is an accounting record, and in most places keeping it for a number of years is a legal requirement rather than a choice.

Because of that, deleting your account does NOT delete your past orders. It removes your profile, your sign-in and the link between you and those orders — the orders themselves remain, as records of a transaction.

Support conversations are kept while they are useful and are not deleted automatically.

Newsletter subscriptions are kept until you unsubscribe. We keep a note that you unsubscribed, so that signing up again by accident does not put you back on a list you left on purpose.

Session recordings are kept for fourteen days and then deleted, not archived. That is shorter than the thirty days Microsoft Clarity keeps its own, and it is short deliberately: a recording exists to answer why this week's visitors got stuck, and a five-week-old one has never told anybody anything they could act on. If you would like the recordings of your visits removed sooner, write to us and they will be.

Your account, and your choices

You can see everything we hold about your orders at any time by signing in, or by using the order tracking page with your order number and email address if you never made an account.

You can change your name, email address and password yourself in your account settings, and you can delete your account from the same place.

You can unsubscribe from the newsletter from any newsletter email, or by turning the preference off in your account settings. Order confirmations, shipping notifications and replies to your own support messages are not marketing and are not affected — you will keep receiving those while you have an order with us.

For anything else, including a request for a copy of what we hold or a request to delete something, write to help@sabrkollective.com and a person will answer.

Cookies and analytics

Two things are always stored in your browser, both necessary for the site to work at all: your shopping bag, so it survives a page reload, and your sign-in session if you have an account. Neither is used to track you and neither asks your permission, because without them the shop does not function.

Beyond that we record how the site is used, and it begins when a page loads. We do not ask first and there is no banner: this page is the notice. Two things run, both described below — our own session recording, kept on our own systems, and Microsoft Clarity, which means what you do here is also sent to another company. If you would rather we did not hold a recording of your visit, write to us and it will be deleted; that is a request we act on, and it is the control you have.

Microsoft Clarity records your session — the pages you open, where you click and scroll, and where you hesitate — and plays it back to us as a video. It masks what you type into forms, so we do not see your address, your message to us or your card details, and card details never reach this site in any case. It sets two cookies of its own, _clck and _clsk, to recognise the same visit across pages.

Our own recording runs whether or not you accept Clarity, and the notice does not turn it off. It is kept on our own systems rather than Microsoft's, so that we can watch a session back inside our own tools. It captures the page as it appeared to you and what you did with it: the pages you opened, what you clicked, where you scrolled, where the mouse went and how the page changed as you used it. What you type is replaced with three asterisks before it leaves your browser — not shortened or scrambled, replaced — so it records that a field was filled in and never what was in it. Photographs and fonts are not copied into it; it refers to them on this site.

Some pages are never recorded at all, by anything, whatever you have or have not agreed to, because of what is printed on them rather than what you type into them: your account and everything under it, the sign-in and sign-up pages, order tracking, the order confirmation after a payment, and our own admin screens. The recorder is switched off on the way in and back on when you leave, so those pages are simply absent. Recordings are deleted after fourteen days.

The third is our own usage note: which link brought you here, the first page you landed on, and what is in your bag, so that we can tell whether an advert was worth running and can offer to help if a bag is abandoned. It is stored on our own systems and is not sold, shared or used for advertising by anyone else.

There used to be a notice at the bottom of the page with Accept and Decline on it, and it was removed. So there is no switch to find and nothing on this site turns the analytics above off. What you can do is write to us: ask for the recordings of your visits to be deleted and they will be, rather than waiting out the fourteen days. Your browser's own controls also still apply — blocking third-party scripts stops Clarity, and clearing site data removes the identifier that ties one visit to the next.

You can change your mind at any time by clearing this site's data in your browser settings, which removes the stored choice and brings the notice back.

There are no advertising cookies, and we do not sell or share anything about you with advertisers.

Security

Card details never reach our servers. Passwords are handled by Clerk and never reach them either. The database connection is encrypted and certificate-verified.

Order pages are readable only by the account that owns the order, or by someone who has both the order number and the email address it was placed with. We do not offer a way to look up an order by email address alone, because that would let anyone work through a list of addresses.

Changes

If this changes in a way that matters, the date at the top of this page changes with it.