Privacy policy

This page lays out what we collect, why we collect it, who else touches it, and what you can ask us to do with it. The short version: we collect what's needed to sell you a board and tell you about the next series, and we never sell your data.

This policy covers maineobject.com and email we send from it. "We" is Yarr Mouth Inc., a Maine corporation doing business as Maine Object Company. "You" is anyone who visits the site, buys something, or signs up for email.

What we collect and why

Our rule is to collect only what's needed to do the thing you asked for: ship an order, send you an email, load a page.

When you buy something

Checkout asks for your name, email address, shipping address, and (optionally) a phone number for the carrier. Payment is handled by Stripe. Your card number goes directly to Stripe and never touches our servers; we see the last four digits and the transaction record. Stripe also uses your address to calculate sales tax where it applies.

We keep a record of the order (what you bought, what you paid, where it shipped) so we can ship it, help you if something goes wrong, honor the numbering and archive of the series, and meet our tax and bookkeeping obligations. Order records are kept as long as those obligations require.

To ship, your name and address are passed to the carrier (USPS). That's the only way a box gets to you.

When you sign up for email

You give us an email address. We store it with our email service, Loops, and use it for one thing: telling you when a new series is released and, occasionally, what's happening in the shop. We don't send daily emails, and we don't rent, trade, or sell the list. Every email has an unsubscribe link, and unsubscribing is immediate.

If you sign up at checkout, we also know what you bought. We may use that to decide which announcements are relevant to you. We don't use it for anything else.

When you browse the site

We use PostHog to understand how people use the site: which pages you visit, how you got here (including any tracking codes in the link you clicked), what device and browser you're using, and roughly where you are based on your IP address. We use this to see which pages and which links actually lead to a purchase. It's how a one-person company decides where to spend its time.

We don't track you across other websites, and PostHog data isn't shared with anyone else.

Advertising

We run ads on Instagram and Facebook. To measure whether those ads work, the site loads the Meta Pixel, which tells Meta when someone who saw an ad visits the site, adds something to their cart, or buys. Meta may also use that information to show our ads to people who have visited before. This is the one place where a third party learns something about your activity on our site, and under some state privacy laws it counts as "sharing." We don't receive money for it and we don't send Meta anything you typed into a form.

You can opt out. See "Your privacy choices" below.

When you email us

If you write to us, we keep the correspondence so we have the history if you write again.

Cookies and browser storage

The site uses first-party storage to remember your cart between pages. PostHog sets a first-party cookie to recognize a returning browser. The Meta Pixel sets a third-party cookie. You can block or clear any of these in your browser settings. The cart may not persist if you do, but the store will still work.

Who else touches your data

We don't run our own servers or payment system, so a small number of services process data on our behalf. Each one gets only what its job requires:

• Stripe: payment, tax calculation, receipts
• Loops: sending email
• PostHog: site analytics
• Meta: ad measurement (see above)
• USPS: shipping labels and delivery
• Vercel: hosting the site

Beyond these, we share your information only if the law requires it (a valid subpoena or court order), or if the company were ever sold, in which case the buyer takes on this policy and we'd tell you before anything changed.

That's the full list. We don't sell personal data, we don't share it with data brokers, and we don't use it for anything not described on this page.

Your privacy choices

Email. Unsubscribe with the link at the bottom of any email, or write to us.

Ad tracking. If you'd rather the Meta Pixel didn't see your visit, you have two options: use a browser or extension that blocks tracking scripts, or adjust your ad settings inside Facebook or Instagram (Settings → Ads → Ad preferences).

Your information. You can ask us at any time to tell you what we have about you, correct it, or delete it. Email privacy@maineobject.com and we'll respond within 30 days. We may need to confirm you're the person the data belongs to. Some records, like order and tax records, we're required to keep even if you ask for deletion, but we'll tell you what we kept and why.

We won't treat you differently for exercising any of these choices.

Where your data lives

We're a U.S. company and the services we use store data in the United States. If you're visiting from outside the U.S., anything you provide is transferred to and stored here.

Children

The site isn't directed at children under 16 and we don't knowingly collect information from them.

Security

Everything between your browser and the site is encrypted in transit. We don't store card numbers. Stripe, our payment processor, is certified to the highest level of the payment card industry's security standard.

Changes

If we change this policy in a way that matters, we'll update the date at the top. If the change affects people on our email list, we'll say so in an email.

Questions

Write to privacy@maineobject.com, or by mail:

Maine Object Company
91 Auburn St, Ste J #1144
Portland, ME 04103