Privacy Policy

Last updated: April 25, 2026

1. Introduction

This Privacy Policy explains how The Tinker Group LLC, doing business as "StreetSigned" ("we," "us," or "our"), collects, uses, shares, and protects information when you use our website, storefront, and wholesale portal (the "Service"). By using the Service, you agree to the practices described in this Policy.

2. Information We Collect

a) Account Information

When you create an account we collect your email address and the password you choose. Passwords are managed by Supabase Auth and stored only as cryptographic hashes — we never see or store the plaintext.

b) Order Information

When you place an order we collect the items you ordered (including the street name and details printed on each magnet), your shipping address, your contact email, and the order total. This information is stored so that we can produce, ship, and support your order.

c) Payment Information

Payments are processed by Stripe. Your full card number, CVC, and expiration date are submitted directly to Stripe and are not stored on our servers. We receive a payment confirmation, the last four digits of the card, and a Stripe transaction identifier so we can reconcile your order.

d) Wholesale Application Information

If you apply for a wholesale account we collect business information you provide, such as business name, contact name, business address, and any supporting details. We use this information to review and manage your wholesale account.

e) Address and Map Data

Our address autocomplete and map preview features are powered by Mapbox. When you type into an address field, your input is sent to Mapbox to suggest matching addresses, and a static map image of the resulting location may be requested from Mapbox. Mapbox processes this data under its own privacy terms.

f) Communications

Transactional emails — such as order confirmations, shipping notifications, and wholesale account updates — are sent through Resend. If you contact us via the contact form or email, we keep your message and our reply so we can follow up.

g) Technical Information

Like most web services, we automatically collect basic technical information such as IP address, browser type, device type, referring URL, and pages visited. This information is used for security, debugging, and aggregate analytics.

3. How We Use Information

We use the information described above to:

  • produce, ship, and provide support for your orders;
  • operate, maintain, and improve the Service;
  • review and manage wholesale account applications and statuses;
  • send transactional emails (order updates, shipping notices, account notices);
  • detect, prevent, and respond to fraud, abuse, and security incidents;
  • comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use it to send marketing emails without your consent.

4. How We Share Information

We share information only with service providers that help us operate the Service, and only to the extent necessary for them to perform their function:

  • Stripe — payment processing.
  • USPS and other carriers — shipping and delivery of physical orders.
  • Mapbox — address autocomplete and static map previews.
  • Resend — delivery of transactional emails.
  • Supabase / Lovable Cloud — hosting, database, authentication, and serverless functions.

We may also disclose information when required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case we will require the recipient to honor this Policy).

5. Data Retention

We retain account, order, and wholesale application information for as long as your account is active and as needed to comply with our legal, tax, and accounting obligations. You can ask us to delete your account at any time, subject to those retention requirements.

6. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email info@streetsigned.com. We will respond within a reasonable time and may need to verify your identity before acting on the request.

7. Security

We use industry-standard measures to protect your information, including TLS encryption in transit, hashed passwords, role-based access control, and Supabase Row-Level Security policies that limit who can access which records. No system is perfectly secure, however, and we cannot guarantee absolute security of information transmitted over the internet.

8. Children's Privacy

The Service is not directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, please contact us so we can delete it.

9. International Users

The Service is operated from, and intended for customers in, the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States.

10. Cookies and Similar Technologies

We use cookies and local storage to keep you signed in, remember your cart, and operate basic site functionality. We do not currently use third-party advertising cookies. You can control cookies through your browser settings, but disabling them may prevent parts of the Service from working.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Service or by email where appropriate.

12. Contact

Questions about this Privacy Policy or how we handle your information? Email us at info@streetsigned.com.