Privacy
Last updated: October 20, 2026
The short version: we collect what we need to get your order to you, and we share it only with the services that help us do that. We don't sell your information, and we don't run ad trackers.
Who we are
This site, darkflock.us, is run by Dark Flock (a d/b/a). We're reachable by email only: hello@darkflock.us. Send privacy requests there too.
What we collect
When you place an order, we keep:
- your name, email address, phone number, and shipping address, which you enter at Stripe Checkout
- what you ordered, the amounts, and the order's status and tracking
We never see or store your card number. Payment details go straight to Stripe.
When you use the contact form, we get your name, your email address, and your message. It's emailed to us so we can reply.
When you browse the site, Cloudflare, which hosts it, handles ordinary technical data such as your IP address, browser type, and the pages you request. That data keeps the site running and secure and gives us privacy-friendly, aggregate traffic numbers. The contact form also uses your IP address for about an hour to stop spam.
Your cart is stored in your own browser until you check out or clear it. It isn't sent to us before checkout.
We don't use advertising or tracking cookies. Stripe uses its own cookies on its checkout page for payments and fraud prevention, and Cloudflare may set strictly necessary security cookies.
How we use it
- to take payment, place your order with the supplier, and ship it
- to send your order confirmation and tracking emails
- to answer your messages, and to handle returns, refunds, and disputes
- to prevent fraud and keep the site secure
- to keep the records that tax and accounting rules require
We only send emails about your order. There is no marketing list. If we ever start one, it will be opt-in.
Who we share it with
Only the services we need to run the shop and fulfill your order:
- Stripe processes payments and screens for fraud. See stripe.com/privacy.
- Brevo sends our order emails. It receives your email address, name, and order details.
- Cloudflare hosts the site, stores our order records, protects the site, and provides aggregate analytics.
- The overseas suppliers who ship your goods receive your name, shipping address, phone number, and the items ordered, so they can label and send the parcel. The shipping carriers see what's on the label.
Because our suppliers are overseas, your shipping details leave the United States to get your order to you.
We may also disclose information when the law requires it, or to protect against fraud. We don't sell your personal information, and we don't share it for cross-site or targeted advertising.
How long we keep it
We keep order records for 7 years, for tax and accounting, then delete them. Contact messages are kept for 2 years. Stripe, Brevo, and Cloudflare keep their own records under their own policies.
Your choices
Email hello@darkflock.us to ask for a copy of your information, to correct it, or to delete it. We'll confirm the request comes from you, usually by replying to the email address on the order. When you ask us to delete your information, we delete what we can. Some records we have to keep for tax, accounting, fraud prevention, or an open dispute, and Stripe keeps its own payment records.
Your rights under US state privacy laws
Depending on where you live (California, Colorado, Virginia, and a growing list of other states), you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to opt out of its sale, its sharing for targeted advertising, or profiling. We don't sell or share personal information for targeted advertising, and we don't profile you, so there's nothing to opt out of, but you're welcome to ask. We honor Global Privacy Control signals as an opt-out request. You can use an authorized agent to make a request for you. We'll respond within 45 days, and we won't treat you differently for using any of these rights. If we turn down a request, you can reply and ask us to reconsider.
Children
The shop isn't directed to children under 13, and we don't knowingly collect their information. If you think a child has given us information, write to us and we'll delete it.
Security
The site runs over HTTPS. Payments are handled by Stripe. Our order desk is locked behind sign-in. No system is perfect, but we keep only what we need, and that limits what could go wrong.
Changes
If we change this policy, we'll update the date at the top. Big changes will be noted on this page.