Loading Dew Theory
Loading Dew Theory
This page describes how the live site handles data you provide. The Privacy Policy PDF is the authoritative printable document.
Your shopping cart and any promo code you apply are stored in your browser's localStorage so the bag persists between visits. That data stays on your device until you clear site data or empty the cart. At checkout, line items are re-priced on the server so totals match current catalog prices.
When payment processing is configured, checkout runs through Stripe. Card numbers and payment credentials are handled by Stripe — Dew Theory does not store full card data on this site. Order records keep what is needed to fulfill and support the purchase (items, totals, shipping address you provide, and status). Without Stripe keys, checkout can still run in a local mock mode for development; that is not a live payment path.
Appointment requests and virtual-consultation intake collect the information you submit so Emily can prepare and follow up. Consultation photos are stored privately — there are no public image URLs. Access is limited to authorized admin views and the secure intake session tied to your consultation. Intake and plan links use private tokens; treat them as personal and do not share them publicly.
Studio staff sign in through a separate admin area. Sessions use an httpOnly cookie so credentials are not exposed to page scripts. That gate is for operators only — it is not part of the customer account experience.
Transactional messages related to orders or consultations may be sent by email when delivery is enabled for the studio. Questions reach Emily by email at hello@dewtheory.studio so she can reply directly.
Cart data stays on your device until checkout. Payments, when configured, go through Stripe. Consultation intake and photos stay private. Admin sign-in uses an httpOnly cookie. First-party funnel events may be recorded to understand storefront flow.
There is no cookie-consent banner and no published retention schedule. Formal GDPR/CCPA request steps will appear here when Emily confirms them. We do not name analytics vendors, ad networks, or a privacy officer until one is actually in use.