Skip to main content
Joan & Joe Co. — Faithfully Made

Joan & Joe Co.

Privacy Policy

Last updated October 13, 2026

Joan & Joe Co. uses information you provide to run the store, answer requests, and fulfill orders. Contact us about privacy at orders@joanjoe.com.


Information you provide


When you place an order, we receive contact information, billing and delivery details, purchased items, personalization instructions, and payment status. Stripe processes payment information. We do not store your full payment card number in our application.


If you create an account, we store account information and the preferences you save, including addresses and wishlists. If you request a restock alert or contact us about custom work, we store the information you submit so we can respond. Prayer requests can include personal or sensitive information. We store those submissions and send the intention and supplied name in a private digest to the store's prayer-request recipients. You may submit a prayer request without your name or email. Please avoid including information about someone else that you do not have permission to share.


How information is used and shared


We use information to provide accounts, process orders and refunds, arrange delivery or pickup, answer requests, send requested notifications, and protect the store against misuse. Necessary service providers receive information for these activities:


- Supabase stores application records and provides account services.

- Vercel hosts the site and provides technical usage and performance measurements.

- Stripe processes checkout, payments, and refunds.

- Shippo and shipping carriers receive delivery information. Printify receives order and delivery information when it fulfills an applicable product.

- Resend delivers store emails, including order notifications and the private prayer digest.

- PostHog receives the limited shopping activity described below and in the Shopping analytics section.


Service providers can also process information under their own policies. See Stripe's privacy policy for its checkout and payment practices. We do not sell shopping analytics or use it for targeted advertising.


Cookies, storage, and shopping analytics


The site uses cookies and browser storage for sign-in, the shopping bag, and preferences. Hosting and payment providers can process technical information needed to operate and secure their services.


For eligible US visits, connected shopping analytics measures public pages, product interest, cart changes, checkout steps, categorized errors, timings, and verified purchases. We use short-lived random journey identifiers. We do not send your name, account identifier, contact details, payment details, form text, or personalization entries to PostHog. We do not record session replays. A signed tracking reference is stored with Stripe at checkout so its outcome can be associated with the original shopping journey.


You can turn this tracking off using the analytics preference on this page or in the footer. We also honor Global Privacy Control for connected shopping analytics. Turning it off stops new activity, queued delivery, and later checkout outcomes associated with your browser. Events already delivered remain subject to the retention periods in the Shopping analytics section. Turning off analytics does not disable information processing needed for purchases, account services, or security.


Retention and your choices


PostHog shopping events are retained for up to one year. Our local checkout references expire after 90 days; withdrawal records expire after up to 90 days without renewed activity. Delivered event buffers are removed after seven days. Stripe retains its checkout records separately under its own policy.


Our application does not currently automatically delete order, account, inquiry, or prayer records on a fixed schedule. Contact us to request access, correction, or deletion. We may need to keep some transaction records for accounting, disputes, or legal requirements. Short-lived analytics identifiers can make older browsing activity difficult to locate after local references expire. We will explain any limits when responding to your request.


We will update this notice when our practices change.

Questions about this page? Write to orders@joanjoe.com and a person from the shop will answer.

Shopping analytics

For eligible US visits, we use limited shopping activity to understand product interest and improve checkout.

We measure public shopping pages, product interactions, cart changes, checkout steps, categorized failures, and verified purchases. We use PostHog in the United States. We do not use session replay, advertising profiles, or analytics account identification, and we do not send names, email addresses, addresses, payment details, search text, or personalization entries to this analytics system.

A random journey identifier lasts up to 30 minutes without activity and at most 24 hours. A separate first-party privacy cookie lasts up to 90 days so an opt-out can also stop later tracking for checkouts you previously started. That privacy identifier is not sent to PostHog. When you start checkout, a signed reference containing these identifiers is stored with Stripe alongside your checkout information. This lets us associate a checkout outcome with its original journey. The analytics preference is remembered for up to one year.

Shopping events are retained by PostHog for up to one year on our free plan. Local checkout references are removed after 90 days, and local withdrawal records expire after up to 90 days without renewed activity. Delivered event buffers are removed after seven days. Stripe retains its checkout records under its own retention policies, separately from our local analytics records. We use analytics to improve the store, without selling it or using it for targeted advertising.

You can turn journey analytics off below. We also honor Global Privacy Control for this tracking. Turning analytics off stops new activity, pending deliveries, and future checkout outcomes associated with your browser. Previously delivered events follow the retention period above. For a deletion request, contact orders@joanjoe.com. We do not send your name or account identifier to PostHog. Older activity may become difficult to locate after local references expire.

Analytics preferences

We use limited shopping activity to improve the store. We do not record your screen or collect form entries for analytics. You can turn journey analytics off.