Legal
Privacy Policy
Effective 9 August 2026
Information we collect
When you place an order or contact us, we may collect your name, email address, delivery address, order details and messages. We keep payment and fulfilment records needed to process and support your order. Stripe processes card details; GreyDepot does not receive or store your complete card number.
Analytics and local storage
We use Google Analytics, Google Ads and the Reddit Pixel to understand visits and measure advertising, and Microsoft Clarity to understand how the storefront is used. These services may process device, browser, page, approximate location and interaction information. The storefront also uses browser storage for the cart, attribution details and checkout continuity.
How we use information
We use information to provide checkout, accept payment, fulfil and track orders, provide customer support, prevent fraud, keep accounting records, measure storefront performance and comply with legal obligations.
Verified customer reviews
After an eligible completed order, we may send one coordinated feedback invitation through a verified Telegram connection or to the order email address. Email invitations use a private, time-limited website link. Telegram and email use the same review entitlement so they cannot create duplicate reviews.
A public verified review is published only after you choose one overall-happiness rating from 1–5 stars, optionally add a short comment, choose the public name shown in the preview (Telegram or real name for linked Telegram customers, and first or full real name for email recipients), preview the exact public display and explicitly select Publish review. Your email address is not published. Your Telegram numeric ID, order, tracking, delivery, purchased-item and payment details are never published with a review.
Every valid rating is included regardless of rating. Written comments follow a rating-neutral moderation policy for personal information, spam, abuse, unsupported claims and content outside the review policy. A poor rating may prompt customer-support follow-up but is not suppressed because of its score.
Service providers
Information is shared only as needed with providers that support the store, including Stripe for card payments, Supabase for order infrastructure, Amazon SES for automated service email, delivery carriers, Google, Reddit and Microsoft for analytics, and professional or regulatory advisers where required by law.
Retention and security
We retain order and transaction records for as long as reasonably required for fulfilment, support, accounting, fraud prevention and legal compliance. We use access controls and encrypted connections, but no online service can guarantee absolute security.
Your choices
You may block or clear browser storage and analytics through your browser settings. You may also ask to access or correct personal information we hold, subject to legal record-keeping requirements.
You may ignore a review invitation or stop future feedback emails without publishing. The same Telegram account that submitted a review may use /reviews to withdraw it even after unlinking. An email recipient may withdraw through the private feedback link while it remains valid for 30 days, or contact us afterward. Use /unlink to cancel pending Telegram alerts and remove the Telegram-to-email connection; unlinking does not by itself withdraw a review already published. You may also contact us to request access, correction or deletion.
Contact
For privacy questions or requests, contact greydepot@protonmail.com.