Privacy Policy

When you place an order: your name, email, phone (optional), and shipping address — the minimum we need to get mesh to your door. If you answer the optional “How did you hear about us?” question at checkout, we save your answer with your order.

When you join the drop list, leave a review, or send an inquiry: your email and whatever you include in your message.

Visit analytics: random browser-tab and visit identifiers, general page paths and times, and the shopping steps a visit reaches: which product pages you open, whether you pick colours or add something to your cart, whether a shipping price was shown or couldn’t be quoted and for which region (Canada, the US or international), which payment button you tapped (such as PayPal or card) and whether that payment was cancelled, failed or completed, and the region you pick when we ask where you’re shopping from. We also record the kind of site that sent you (such as Instagram, Facebook, a search engine or a direct visit), your device type (phone, tablet or computer), whether you’re browsing inside an app such as Instagram, and categories of outgoing links (such as Instagram or email). We use these to count visitors, see where shoppers stop and fix what’s in the way. Full URLs and referrer addresses, anything you type into forms, your colour choices, names, cart contents and payment details are not recorded in analytics, and we do not link these identifiers to orders.

Meta pixel: our store pages load Meta’s pixel so we can measure how our Facebook and Instagram ads perform. It tells Meta which store pages and products you view, when you add a product to your cart, start checkout or choose a payment button (with product IDs, prices and currency), and, when you complete an order, the order total, currency, product IDs and number of items. Meta also receives standard technical details from your browser, such as your IP address and device and browser type, and uses its own cookies. We don’t send Meta your name, email, phone, address or payment details. Meta handles this information under its own privacy policy and may connect it to a Facebook or Instagram account you’re signed in to.

Your payment details. All payments are processed by PayPal on their systems — your card or PayPal credentials never touch our servers.

To fulfill and ship your orders, send order confirmations and tracking, respond to inquiries, and — if you bought from us or joined the list — occasionally tell you about drops and restocks. Every marketing email includes a way to unsubscribe.

We never sell, rent, or trade your personal information. Period.

Like most small shops, we rely on a few trusted service providers to operate: PayPal (payments), Supabase (order database and visit counts), Vercel (website hosting), and Resend (email). Hosting and security services may process technical request information to deliver and protect the website. Service providers may process information outside Canada.

We use your browser’s local storage to remember your cart between visits, your currency preference and, if you told us, the region you shop from. To suggest that region, we use the country our hosting provider (Vercel) detects from your connection; we don’t store it. Meta’s pixel (described above) sets Meta’s own cookies, such as _fbp, to measure our ads; we don’t use any other third-party advertising cookies.

Visit analytics keeps its random visit identifier in session storage for the browser tab, so it clears when you close the tab. It doesn’t use cookies.

Shopping journeys use a separate random session identifier, also kept in session storage, that resets after 30 minutes without a recorded shopping step. We treat the last page seen after that interval as an estimated exit; it does not prove that you closed your browser.

Browser Do Not Track and Global Privacy Control signals turn visit analytics off and stop Meta’s pixel from loading.

We periodically clean up visit and journey records older than 90 days when new analytics traffic arrives; this is best-effort housekeeping rather than an exact automatic deletion deadline. Business order records are handled separately from visitor analytics.

Want your data corrected or deleted, or want off the email list? Email us at mistcitylacrosse@protonmail.com and we’ll take care of it promptly. You can also unsubscribe from any marketing email directly.

To keep our visit analytics and Meta’s pixel off, turn on Global Privacy Control or Do Not Track in your browser. You can also block third-party cookies, and manage how Meta uses information for ads in your Facebook or Instagram ad preferences.

Mist City Lacrosse operates from Niagara Falls, Ontario, Canada, and handles personal information in accordance with Canadian privacy law (PIPEDA). If we ever materially change this policy, we’ll update this page.