Privacy

What is collected, and where it goes

Peel & Eat is run by Cafecito AI. There are no accounts and nothing to log into. Everything below is collected because an order cannot be printed and posted without it.

Card details

Never reach this site. Payment is handled by Stripe on Stripe's own checkout page. We never see, hold or store a card number.

Name and shipping address

Entered at checkout and stored in our database, which is Cloudflare D1. Both are sent to Gelato, the print-on-demand printer, because a parcel cannot be produced or addressed without them.

Email address

Stored with the order and used to send the receipt and the shipping tracking link. It goes to Resend, which delivers that mail, and to nobody else. It is not sent to the printer — Gelato gets the address the parcel goes to, not a way to write to you.

What you bought

Which games, how many packs, the amount charged, and the order's status as it moves from paid to printed to shipped.

An address you type in

If you use the footer form to have the fourteen free printables emailed to you, that address is stored on its own and used only to send those links. Nothing else is sent to it. Reply to the email and the row is deleted by hand.

Who else handles it

Four companies, each doing one job that cannot be done here:

• Stripe — takes the payment. The checkout page is Stripe's, so card details go to Stripe and not to us.
• Gelato — prints the cards in the United States and hands the parcel to the carrier. Gets the name, the shipping address and the order contents. Not the email address: we send the receipt and the tracking link ourselves, so the printer is never given a way to write to you.
• Resend — delivers the receipt and the tracking email. Gets the email address and the text of the message.
• Cloudflare — hosts the site, serves every page, and is where the database lives.

Nobody else is sent anything.

The one cookie

The site sets a single first-party cookie. It holds sixteen random bytes generated on the server and nothing else — no name, no email, no device or network detail, and nothing derived from any of those.

Its only job is to stop one person reloading the page from being counted as several visitors. It is not an advertising identifier, it does not follow you to any other site, and it is not linked to a person or to an order. It is set HttpOnly, so no script on the page can read it, and it does not travel between cafecito-ai.com and betwaggle.com — the two hosts this shop is served from each get their own.

What is counted

Three numbers, recorded first-party on our own server: pages viewed, checkouts started, and orders completed. They exist to answer whether the shop works.

Each of those rows carries the cookie id above, the host and path, and the referring origin only — https://news.example and never the rest of the address. No IP address, no browser user-agent string and no email address is stored on any of them.

No third-party analytics, and no advertising pixels

There are none on this site today. No Google Analytics, no Meta pixel, no TikTok pixel, no ad-network tag, no session recorder, no third-party script of any kind on any page. The only requests a page makes are to this site itself.

If one is ever added, this page will be updated to name it before it goes live, along with what it collects. That sentence is the commitment, not a formality.

What is never done

• No data is sold, and none is shared for anyone else's advertising.
• No profile of you is built, and nothing here is used to target you.
• No mailing list is built out of orders. Buying cards does not put you on one.

Playing in the browser

The free scorecards at Start a round need no account. A round in progress is kept in your own browser's storage and is never uploaded — clear the browser and it is gone, from everywhere it existed.

Looking up a golf course is the one exception: the text you type is sent to this site, which asks a course directory on your behalf and caches the answer for everyone. The search text is not stored against you.

Asking us about it

Email orders@cafecito-ai.com to ask what is held about an order, to correct an address, or to have your order details and any stored email address deleted. Quote the order reference from your receipt if you have one — it is the only way to find an order, since there is no account to look you up by.