1. Who We Are

SweetStone ("we," "us," "our") is a lifestyle and legacy brand operating at sweetstone.com. SweetStone is part of the ClaudeCard ecosystem. For privacy questions, contact us at claudecard710@gmail.com.

2. Information We Collect

We collect information you provide directly:

• Account information: Email address, password (hashed), display name
• Profile preferences: Clothing sizes, notification preferences, contact details you choose to share
• Purchase information: Order details, shipping addresses, payment method tokens (processed by Stripe — we do not store card numbers)
• Communications: Messages you send through our contact or member messaging system
• Usage data: Pages visited, actions taken, session duration (collected anonymously)

3. The Ridiculous Passport

SweetStone uses The Ridiculous Passport — a shared identity system operated by ClaudeCard — to manage authentication across the ecosystem. When you create a Ridiculous Passport account, your identity (email address, user ID, and basic profile) is shared across participating ClaudeCard ecosystem sites. Each site maintains its own reward points, preferences, and membership status separately.

Your password is never stored in plain text. Authentication is managed through Supabase, which follows industry-standard security practices.

4. How We Use Your Information

• To process orders and fulfill purchases
• To manage your Ridiculous Passport account and membership
• To communicate about orders, requests, and account activity
• To operate the private Vault access system
• To send newsletters and drops you opt into
• To improve the site and member experience
• To comply with legal obligations

5. Payment Processing

Payments are processed by Stripe. We do not store, transmit, or have access to your full payment card details. Stripe's privacy policy applies to payment data: stripe.com/privacy.

6. Data Sharing

We do not sell your personal information. We share data only:

• With Stripe to process payments
• With Supabase to store and authenticate your account
• Across ClaudeCard ecosystem sites through The Ridiculous Passport (email/ID only)
• When required by law

7. Private Vault & Member Content

Access to the SweetStone Vault requires age verification and admin approval. Information submitted during the access request process (including your application message) is visible to SweetStone administrators for the purpose of approval decisions. This data is retained for the duration of your membership.

8. Cookies & Tracking

We use necessary cookies for authentication and session management. We do not use third-party advertising cookies. Session tokens are stored securely and expire after inactivity.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Opt out of marketing communications at any time
• Lodge a complaint with your local data protection authority

To exercise these rights, email claudecard710@gmail.com.

10. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. Order records are retained for seven years for legal and accounting purposes. You may request deletion of non-legally-required data at any time.

11. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or a prominent notice on the site. Continued use of the site after changes constitutes acceptance.