Privacy Policy

Last updated:12 August 2026

Lychee Vibes ("we") operates the shop at lycheevibes.com and the member area at lycheevibes.com/account. This policy explains how we handle personal data when you use our sites.

Who we are

Lychee Vibes Limited Liability Company — 30 N Gould St Ste N, Sheridan, WY 82801, United States — contact: [email protected]

Data we collect

  • Orders: email, order details, payment status. Your name and shipping address are collected when you pay on PayPal and stored with your order after successful payment.
  • Guest order view (no account): if you checkout as a guest, we email a private link with a random token. You must also enter your order email to view details. The link works for 60 days after the order is placed. On that page we show a masked street address (house number or the last part of the line only); city, state, and postal code may still be shown. The full address remains in our order records for fulfilment.
  • Account: email and profile data via Supabase Auth; saved shipping addresses for members (optional, including addresses synced after checkout).
  • Cart: items stored in your browser's localStorage until checkout or you clear storage.
  • Previous guest addresses (optional): after a guest order, the shipping address may be saved in localStorage (lv-guest-shipping-addresses) to pre-fill PayPal on a future visit — we do not ask you to type the address on our site.
  • Technical: IP address and similar logs may be processed by Cloudflare (hosting, CDN) for security and delivery.

Checkout & payments (PayPal)

On lycheevibes.com you enter your email (guests) or sign in (members). Your shipping address and payment details are entered on secure pages operated by PayPal (account, card, Apple Pay, Google Pay). We receive payment confirmation, the amount, and — after successful payment — the shipping address you confirmed there.

Third parties & embeds

  • Supabase — authentication and database (orders, accounts).
  • PayPal — payment processing and shipping-address collection at checkout.
  • Cloudflare (Pages, R2) — website and product image delivery.
  • YouTube, Vimeo, Bilibili — videos in product descriptions load only after you click "Load video".
  • Google Analytics — usage statistics, only after cookie consent.

Fonts (Montserrat for headings, Inter for body) are self-hosted on our domain; we do not load Google Fonts from Google's servers.

International transfers

PayPal, Supabase, and Cloudflare may process data in countries outside your residence (e.g. the United States). They provide contractual and technical safeguards where required by law.

Legal bases (GDPR)

Contract (orders, delivery), legitimate interests (security, running the shop), and consent (embedded videos, Google Analytics where you opt in, and optional Design Gallery sharing at checkout).

Cookies & analytics

  • Essential: cart (localStorage), cookie consent (lv-cookie-consent), video consent (lv-external-media-consent), optional guest address prefill — needed to run the shop.
  • Analytics (optional): The Google Analytics script is included with analytics storage denied by default (Consent Mode). Data collection starts only if you click "Accept analytics" in our cookie banner. Google may process IP address, device data, and page views — see Google Privacy Policy.
  • Change your choice: use Cookie settings in the site footer, delete lv-cookie-consent in your browser and reload the page, or email [email protected].

In the custom bracelet designer you may voluntarily opt in before checkout to publish your design in our public gallery after successful payment ("Share to Gallery after purchase"). Sharing is optional — you can order without it.

  • What we publish: bead sequence / layout, preview image, size band label, approximate total price at order time, and a display name (account nickname or "Anonymous").
  • What we do not publish: email, shipping address, full legal name (unless part of your nickname), payment details, or other order fields.
  • How others use it: visitors may view your listing and open the same bead sequence in the designer as inspiration (clone). See also Terms — Design Gallery.
  • When it goes live: after PayPal payment is confirmed — not when you save a draft in the designer.
  • Consent record: we store the time, order number, and version of the consent text (lv_design_gallery_consents).
  • Discount: the gallery discount is applied at checkout. It is not reversed if we later hide or remove the listing.
  • Removal: uncheck before payment to decline. After publication, email [email protected] to request takedown; we may retain order and consent records where required by law.

Legal basis: consent (GDPR Art. 6(1)(a)).

Retention

We keep order and account data as long as needed for contracts, accounting, and legal obligations. You can clear browser localStorage at any time.

Your rights

You may request access, correction, deletion, restriction, portability, or object to processing. EU users may lodge a complaint with a supervisory authority.

Contact

Privacy & data requests: [email protected]
Orders & support: [email protected]
General inquiries: [email protected]

Support · Terms of Service