Acme Inc. operates this demo shop. This privacy notice describes how Acme Inc. may process personal data when you browse, create an account, place an order, or contact us. It is placeholder copy — replace controller identity, contact details, and retention periods with counsel-reviewed text before production traffic.
Controller contact: set the legal entity name, postal address, and privacy email in site settings and this page before go-live. A counsel review of this notice, the cookie policy, and any data processing agreement with analytics hosting is a launch gate.
Commerce data: Medusa stores orders, cart cookies, customer accounts, and payment provider outcomes as necessary to fulfil contracts and run the shop. We do not treat self-hosting analytics as a consent exemption.
Analytics: only after you opt in, first-party Matomo cookies (_pk_*) measure page journeys, product and cart behaviour, checkout steps, and pseudonymised purchase attribution. We do not send email, name, address, raw customer or order IDs, JWTs, or unrestricted query strings to Matomo.
Operational reporting: aggregate sales totals (orders placed, paid, cancelled, refunded, fulfilled, units, revenue components) are derived from Medusa records without browser identifiers, Matomo cookies, or cross-session visitor profiles.
Your choices: use Cookie settings in the footer to accept, reject, or withdraw analytics, preference storage, and external media. Global Privacy Control is treated as a denial of optional purposes.
Storage inventory: necessary — _medusa_* session/cart/auth cookies, Stripe checkout fields, and the _vulpy_consent cookie; preferences (optional) — wishlist and recently-viewed localStorage; analytics (optional) — Matomo _pk_* cookies; external media (optional) — YouTube/Vimeo embeds.
