Privacy Policy

This policy explains what NIXMEDIA LLC, doing business as “Sloafed” (“Sloafed,” “we,” “us”), collects when you use sloafed.com, the bakery shop at bake.sloafed.com, or the pattern shop at pattern.sloafed.com, and what we do with it.

1. What we collect

Information you give us

• Your name and email address.
• Your password — stored only as a secure hash, never in plain text.
• A pickup or delivery address for bake orders, and any notes you add to an order.
• Messages you send us by email.

Information collected automatically

• Standard server and security logs — your IP address, browser type, and the pages and times of your requests — kept by the servers we operate and by Cloudflare, which sits in front of the Sites to deliver content and block abuse.
• One essential cookie, sloafed_session, which keeps you signed in across the shops. It’s HTTP-only and lasts about 30 days.
• A cart identifier stored in your browser’s local storage so your basket survives a page reload.
• Basic visit statistics — the page you viewed, the site that referred you, any campaign tags in the link you followed (such as utm_source), your approximate location (country, region, and city, estimated from your IP address), device type, screen size, browser, operating system, and language. We use these to see which pages and links people actually use.

We collect those visit statistics with Umami, analytics software we run on our own server. It sets no cookies and doesn’t follow you across other websites. Your IP address is used only to derive an anonymous, one-way visitor identifier and is never stored, and the statistics aren’t linked to your account or shared with anyone.

We don’t use advertising or tracking cookies, we don’t load third-party trackers, and we don’t share or sell data to ad networks.

2. Payments

Card payments are handled entirely by Stripe. You enter your card details directly into Stripe’s form; they never reach our servers. We receive only a payment confirmation, the last four digits and brand of the card, and whether the charge succeeded. Stripe processes this data under its own privacy policy.

3. How we use your information

• To take payment for and fulfil your orders.
• To deliver digital patterns to your account and keep them available.
• To send you order-related email — confirmations, pattern delivery, cancellations, password resets, and email verification. We send these through Resend.
• To answer your questions and provide support.
• To detect and prevent fraud and abuse.
• To meet our tax, accounting, and other legal obligations.

Our newsletter

We send marketing email only to people who sign up for it, in one of three ways:

• At checkout. The newsletter box starts ticked; untick it if you don’t want our emails. If you leave it ticked, you’re subscribed straight away with the address your order goes to, and we send a welcome email with a one-click unsubscribe link. If that email can’t be delivered, you’re unsubscribed automatically.
• When you create an account. The box starts ticked in the pattern shop and the bakery, and unticked on sloafed.com. Your subscription starts once you confirm your email address with the code we send, and you get the same welcome email. If you never confirm your email, we delete the sign-up after 30 days.
• With the Newsletter tab in the corner of our pages. Because anyone can type any address there, we first email you a link, and you’re subscribed only after you open it and confirm. If you don’t confirm, we won’t email you again, and we delete the unconfirmed sign-up after 30 days.

For each subscriber we keep the email address, which topics you signed up for (for example, patterns, bakes or both), where you signed up, the exact wording you agreed to, how your subscription was confirmed, and when you signed up, confirmed, or unsubscribed. Every newsletter has a one-click unsubscribe link, and your mail app’s own unsubscribe button works too. Unsubscribing never affects emails about your orders.

4. Who we share it with

We don’t sell your personal information. We share it only with service providers who process it on our behalf, and only as far as they need to:

• Stripe — payment processing.
• Resend — sending order-related email and, if you subscribe, our newsletter. Resend keeps confirmed subscribers’ addresses and topic choices so it can send the newsletter and handle unsubscribes.
• Cloudflare — content delivery and security.
• A delivery courier, if your bake order is delivered rather than picked up.

We may also disclose information if the law requires it, or to protect our rights, our customers, or the public.

5. How long we keep it

We keep your account and order records while your account is open, and for up to 7 years afterward where we need them for tax and accounting. Server logs are kept for about 90 days and then rotated out. Your pattern library is tied to your account for as long as the account exists. Newsletter sign-ups you never confirm are deleted after 30 days. If you unsubscribe, we keep a record that you did, so that we don’t email you again.

6. Your choices

To stop getting the newsletter, use the unsubscribe link in any issue. It takes one click and doesn’t need an account.

Email [email protected] to see the personal information we hold about you, correct it, or ask us to delete it. Depending on where you live you may have additional rights over your data; we’ll honour those that apply to you.

Deleting your account removes your personal details from our systems. We keep the minimum transaction records the law requires us to keep. Note that deleting your account also ends your access to any patterns in your library.

7. Security

We protect your information with measures including hashed passwords, encrypted connections (HTTPS) across the Sites, an HTTP-only session cookie, and limited internal access. No system is perfectly secure, but we take this seriously and review our setup regularly.

8. Children

The Sites aren’t directed at children, and we don’t knowingly collect personal information from anyone under 13. If you believe a child has given us information, email us and we’ll delete it.

9. Changes to this policy

If we change this policy we’ll update the “last updated” date above and, for significant changes, do more to let you know.

10. Contact

NIXMEDIA LLC (dba Sloafed)
Chicago, Illinois
[email protected]