Your data, handled with care.

Effective October 6, 2026.

This policy explains what Fortune Cookie Shirt (“we,” “us”), based in Las Vegas, Nevada, collects when you use fortunecookieshirt.com, how we use it, and the choices you have. The short version: we collect only what we need to give you a fortune and ship your shirt, and we never sell your personal information.

What we collect

When you crack a cookie. A random, anonymous browser ID stored in a cookie named fcs_vid, so we can give you one fortune per day and let you claim it. It isn’t tied to your name. If you use “Make it personal,” we also save your two optional answers (what you’re chasing and the tone you like).

When you buy. Your name, email, phone number, shipping address, the size you chose, and your order details. Payment is handled entirely by Stripe. We never see or store your full card number.

When you create an account. Your email address, the browsers you’ve signed in on (linked by the anonymous fcs_vid ID), the fortunes you’ve cracked and claimed, your streak, and your points history. A signed cookie named fcs_member keeps you signed in for up to 180 days.

When you subscribe. Your email address and where on the site you signed up.

Automatically. Like most websites, our hosting provider records basic technical data such as IP address, browser type, and pages requested, for security and reliability. Our analytics and advertising tools (below) collect device, page-view, and interaction data.

How we use it

To write and store your fortune, process your payment, print and ship your order, send order confirmations and tracking, answer support requests, prevent fraud and abuse, understand how the site is used, measure our ads, and, if you subscribed, send you occasional email. We use your information only for these purposes.

Who we share it with

We share information only with the service providers that make Fortune Cookie Shirt work, and only what each one needs:

• Stripe: payment processing.
• Printful: printing and shipping. They receive your name, shipping address, email, phone, and the shirt to print.
• Supabase: our database for fortunes, orders, accounts, points, and email signups.
• Resend: sends account emails, like your sign-in link.
• Vercel: website hosting.
• Anthropic: writes your fortune. It receives only your optional personalization answers, never your name, email, or address.
• Meta (Facebook/Instagram) and Google: analytics and ad measurement through the Meta Pixel, Meta’s Conversions API and Google tools. They may set their own cookies and receive events like page views, cookie cracks, and purchases. For purchases, we send Meta your email, phone, name and shipping city/state/ZIP only in hashed (scrambled) form, so Meta can match the sale to an ad without us handing over the raw details.

We may also disclose information if required by law or to protect our rights, our customers, or the public. If our business is ever sold or merged, customer information may transfer as part of that deal under this same policy.

We don’t sell your data

We do not sell your personal information for money. Some privacy laws treat sharing browsing data with advertising partners like Meta and Google as “sharing” or “targeted advertising.” You can opt out of that at any time (see Your choices). We honor Global Privacy Control signals where required by law.

The public registry

When you claim a fortune, its text, lucky numbers, edition number, and claim date appear on our public registry. We never publish your name, email, or address. Sealed gift fortunes stay private.

Cookies

We use one essential cookie (fcs_vid) to run the daily cookie and claim flow, a sign-in cookie (fcs_member) if you have an account, plus a small preference (your sound setting) saved in your browser. Meta and Google may set analytics and advertising cookies. You can block or clear cookies in your browser settings; the site still works, though you may be able to crack a new cookie only once per browser per day.

How long we keep it

Order records are kept as long as needed for fulfillment, support, and tax and accounting requirements, generally up to 7 years. Unclaimed fortune records keep only the anonymous browser ID. Email signups are kept until you unsubscribe or ask us to delete them. Accounts and points history are kept until you ask us to delete your account; points expire after 12 months either way.

Your choices and rights

• Email: every marketing email has a one-click unsubscribe.
• Ads and analytics: adjust your ad preferences in your Meta and Google account settings, use your browser’s tracking protections, or email us to opt out of sharing.
• Access, correction, deletion: email info@fortunecookieshirt.com and we’ll respond within 30 days, or sooner where the law requires. We may need to verify your identity, and we’ll keep records the law requires us to keep.

Depending on where you live (including California, Nevada, and other US states), you may have additional rights under local law. We will never treat you differently for exercising them.

Security

We use encrypted connections (HTTPS), keep our database private behind server-only access, and rely on PCI-compliant Stripe for payments. No system is perfectly secure, but we work to protect your information and limit who can reach it.

Children

Fortune Cookie Shirt isn’t directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child has given us information, email us and we’ll delete it.

Changes

If we update this policy, we’ll change the effective date above. Significant changes will be called out on the site.

Contact

Questions or requests: info@fortunecookieshirt.com · Fortune Cookie Shirt, Las Vegas, Nevada.