Privacy Policy

Sandpoint Soda Company (“we,” “our,” or “us”) is a small, family-run business in Sandpoint, Idaho. We sell within the United States only. This policy explains how we handle your information when you visit sandpointsodacompany.com, place an order, sign up for our newsletter, or contact us.

Information we collect

When you shop or get in touch, we may collect:

• Contact & order details - your name, email, shipping address, phone (if you give it), and order history.
• Payment information - processed directly by our payment provider. We never see or store full card numbers.
• Messages - anything you send us through the contact form, email, or our newsletter signup.
• Automatic data - when you browse, we and our analytics and advertising partners collect device and usage information such as IP address, browser type, pages viewed, referring site, and similar data through cookies and similar technologies.

How we use your information

• Process, ship, and confirm your orders
• Answer your emails and customer-service requests
• Send order and shipping updates
• Send our newsletter, if you opt in
• Measure and improve the website and our products
• Run and measure our advertising
• Prevent fraud and meet legal obligations

Who we share it with

We don’t sell your information for money. We do share it with the service providers that help us run the shop, and with the analytics and advertising partners described below. The providers we rely on include:

• Stripe - payment processing
• Vercel - website hosting and delivery
• Railway & Supabase - our store backend, database, and newsletter list
• Resend - sending order, contact, and newsletter email
• Shipping carriers - to deliver your order

These providers may only use your information to perform services for us. We may also disclose information if required by law or to protect our rights.

Analytics & advertising

We use analytics tools - Google Analytics 4, Vercel Analytics, and Plausible - to understand how the site is used so we can improve it.

We also advertise, including on Meta (Facebook and Instagram). To measure and target those ads, we use the Meta Pixel and Conversions API (and may use similar tools from other ad platforms). This means we share limited information - such as a hashed version of your email and events like page views and purchases - with these partners so they can attribute and improve advertising. Under California law, this kind of cross-context behavioral advertising may be considered “sharing” or a “sale” of personal information, even though no money changes hands. See your choices below.

Cookies

We use three kinds of cookies and similar technologies:

• Essential - cart and session functionality. The site can’t work properly without these.
• Analytics - to understand site usage.
• Advertising - to measure and target ads.

You can control cookies through your browser settings, and you can limit ad tracking through the choices below.

Your choices

You’re always in control of your information. You can:

• Ask us to access, correct, or delete the personal information we hold about you
• Ask us to stop using your information for advertising
• Manage or block cookies in your browser settings
• Adjust your ad preferences directly with Meta and Google
• Unsubscribe from our newsletter using the link at the bottom of any email

For any of these, just email hello@sandpointsodacompany.com and we’ll take care of it, usually within a few days.

California residents: we don’t sell your personal information for money. We do use advertising tools (like the Meta Pixel) that may count as “sharing” under California law. If you’d like to opt out of that, just email us and we’ll stop.

Data retention

We keep order and customer records for as long as needed to run the business and meet tax and legal requirements, then delete or anonymize them. Newsletter data is kept until you unsubscribe.

Security

We use industry-standard safeguards to protect your information. Payment is handled by a PCI-compliant processor, and the site runs over HTTPS. No method of transmission is ever 100% secure, but we work to keep your data safe.

Children

Our site is not directed at children under 13, and we don’t knowingly collect their information.

Changes

We’ll update this policy if our practices change; the “last updated” date above reflects the most recent revision. We review it at least once a year.

Contact

Questions about your privacy? Email hello@sandpointsodacompany.com or write to us at the address on our contact page.