What we collect
The minimum to run an account — and browsing signed out stays anonymous.
If you never sign in, we never build a record of you. Once you do have an account, this is the whole list — and the list of things we deliberately never ask for.
What we store
- Your name and email address
- A hashed password — never the original
- Phone number and pickup address, if you add them
- Cuts you save, orders you place, and what’s in your cart
- Your rewards balance and the points history behind it
- Reviews and messages you write, under your name
- Saved cards — the brand, last four digits and expiry only
- An id linking your account to Stripe, created the first time you check out through it
- When you were last active, and any note shop staff add to your account
What we never ask for
- Your full card number — Stripe handles that end
- Your date of birth
- A log of your IP address or your location
- Anything about other sites you visit
- Advertising or social identifiers
- Anything we don’t actively need
One honest footnote on that last card: your IP address is read for a moment on the handful of actions worth throttling — signing in, registering, changing a password, checking out, applying a promo code, and posting a review or message — so the site can slow down repeated attempts. It's counted in memory and never written down. But it isn't invisible to us either, and as with any site, your requests reach our host's logs.
And if you're exploring through the demo, one thing to know: those accounts are shared by everyone trying the site. Anything you type into one — a delivery address at checkout, a note on an order — is visible to the next visitor until the nightly reset clears it. Use made-up details there.
How it’s used
Two purposes. There isn’t a third.
- To run your account — signing you in, showing your saved cuts and past orders, and keeping your rewards balance straight.
- To run the counter — staff see your order so they can prepare it, and your messages so they can answer them.
The site doesn't send email. There's no mailing list, no newsletter, and nothing automated — no mail service is connected to it at all, so your order updates live in your order history rather than your inbox. Staff can still write to you by hand from their own mail account: a reply if you message the shop, or a copy of your receipt if you ask for one.
What we don’t do
No selling, no sharing, no profile of you anywhere.
We don't sell your data, hand it to advertisers, or use it to build a picture of you across other sites. There is no third-party advertising network anywhere on EliteCuts, and no plan to add one.
We also don't measure you. The site carries no analytics script — nothing counts your page views, times how long you stay, or records which features you use. The sales figures on the shop's own dashboard are built from orders, not from watching you browse.
Third parties
Four services power the site. Each one sees only what it needs.
- StripeTest-mode payment flows only — no real card is ever charged.Role: Payments
- MongoDB AtlasYour account record, orders, reviews and messages.Role: Database
- CloudinaryProduct photography. No customer data.Role: Images
- VercelRequests to the site, which means your IP address reaches their logs the way it would with any host.Role: Hosting
Your choices
Edit or close your account yourself — and here’s exactly what closing it leaves behind.
Edit anything
Your name, email, phone, pickup addresses and saved cards are all yours to change, and any saved cut can be unsaved.
Profile page
Close your account
Hidden from the site straight away, then erased 30 days later. No exit survey, no retention offer.
Profile → Delete
Change your mind
Sign back in during those 30 days and the deletion is cancelled — your account comes back untouched.
Any sign-in
Deleting an account isn't a clean wipe, and it's worth being straight about why. Past orders stay on the shop's books with the name, email and phone that were on them, because a sales record belongs to the shop as much as to you. They are detached from any account and closed to the site: signing up again with the same email address will not attach them to a new one, and the confirmation links you were given at the time stop working. Reviews you wrote stay published under your name, and messages you sent the shop stay in the shop's inbox under your name — both detached from any account. And a short audit record of the deletion is kept indefinitely so the action can be accounted for afterwards — each entry carries your email, and where an admin deleted the account rather than you, the reason they typed is kept on it too. If you ever saved a card, it also carries the reference our payment processor knew you by — kept so that if deleting your card at their end ever fails, we can still find and remove it by hand.
Everything else goes: the account itself, your cart, your saved cards — the copy here and the one held at Stripe — your saved cuts, your rewards balance and points history, your notifications, the record of which reviews you marked helpful, and the delivery address and any note you left on an order.
One thing you don't have to do anything to trigger: if you don't sign in for 18 months, the account is flagged as dormant. If it's still untouched 30 days after that, it enters the same deletion process described above, and is erased 30 days later. Signing in — or placing an order — at any point along the way clears the flag and stops the clock.
If any of this changes, the date at the top of this page moves with it. There's no mailing list to announce it on — the shop doesn't send email — so that date is the honest signal, and it's the one to check.