Privacy

What we collect

Only what an order or an account actually needs:

• To place an order: your name, email address, phone number and delivery address. You do not need an account to order.
• To sign in: your phone number. It is the account — the one-time code goes to it. A name and email are optional, and only used to reach you about an order.
• One-time codes: stored hashed, never in plain text, one live code per number, and replaced the moment a new one is sent.
• Your saved items, if you sign in and save something.
• If you enter the Street Proof campaign: the links to your three Instagram posts and the place name you type for each. Those posts are already public — we store the link, not the video.
• Your order history, so you and we can both see what was bought and what happened to it.

Payments

Payments are handled by Razorpay. Card numbers, UPI IDs and bank details are entered in their checkout and never reach our servers — we never see them and could not store them if we wanted to.

What we keep is Razorpay’s own reference for the payment and for the order, which is what lets us match a payment to your order and issue a refund if one is due.

Cookies

Four, all set by this site, none of them for tracking or advertising:

• ns_age_ok — remembers that you confirmed you are 18 or over, so the door does not appear on every page.
• ns_theme — remembers which side of the shop you chose.
• ns_user — your sign-in, signed so it cannot be forged. Only set when you sign in.
• ns_admin — the back office. Only ever set for us.

Your basket

Your basket is kept in your own browser, in local storage. It is not sent to us and we cannot see it until you place an order. Clearing your browser data clears it.

What we do not do

There is no analytics on this site. No Google Analytics, no advertising pixel, no session recorder, no third-party tracker of any kind. Nothing follows you off this site, and we do not build a profile of you.

We do not sell, rent or trade your details. Ever, to anyone.

Who else handles your data

Four services, each doing one job:

• Vercel — hosts the site.
• Neon — hosts the database your order and account are stored in.
• Razorpay — takes the payment.
• Twilio — sends the one-time code to your phone.
• A delivery partner is given your name, address and phone number so they can bring you the parcel. That is the only reason they get it.

How long we keep it

Orders are kept as business records — we have to be able to answer a question about a purchase, and tax records have their own rules.

One-time codes expire in minutes and are overwritten by the next one. An account that you ask us to delete is deleted, along with its saved items and campaign entry.

Your rights

Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Message @nosaints.in on Instagram and we will get back to you within 48 hours.

You can change your name and email yourself, on your account page, at any time.

Age

This shop is for adults. We do not knowingly collect anything from anyone under 18, and if we learn that we have, we delete it.

Changes

If this policy changes, the date at the top changes with it. We will not quietly start doing something this page says we do not do.