Help · updated 19 September 2026
Privacy.
What Bandit collects when you shop (order details, email), who handles it (Stripe, Printful, Resend), what we don't do (no ad tracking, no cookies on the storefront) and how to have it deleted.
What we collect
When you order: your name, email, shipping address and what you bought. Payment details go straight to Stripe, who process the card — we never see the number.
When you join the list: your email address and which form you used.
When you browse: an anonymous random id stored in your browser (localStorage, not a cookie) so we can count how many people looked at a design versus added it to the bag. It isn't linked to your name, email or order, and clearing site data resets it.
Who handles it
Stripe takes payment and collects the shipping address at checkout. Printful prints and ships the bandana, so they receive your name, address and the items. Resend delivers our order and shipping emails. Supabase stores the order record. Vercel hosts the site and, like any host, keeps short-lived server logs that include IP addresses.
That's the list. We don't sell or share your details with anyone else, and we don't run advertising pixels or third-party analytics on the storefront.
Order confirmation, shipping notice and, if you joined the list, one email per drop. Every list email has an unsubscribe link, and replying "stop" to any message works too.
Keeping and deleting it
Order records are kept for as long as we're required to for tax and accounting. Anything else — your list subscription, your details on file — is deleted on request. Write to hello@dogbandit.com from the address you used and we'll confirm when it's done.
Your rights
Wherever you are, you can ask what we hold about you, ask for it to be corrected or deleted, and object to how it's used. Same address: hello@dogbandit.com. If this policy changes, the date at the top of this page will.