Privacy

Last updated: November 14, 2026. This policy is written to comply with Canada's PIPEDA, and with CASL for email.

Who we are

farfarout.art™ is operated by 1001581033 Ontario Inc., operating as farfarout.art, Ontario, Canada. Privacy questions: contact@farfarout.art.

What we collect

• To ship your order: your name, email and shipping address. Collected by Stripe at checkout and stored by us, encrypted. We remove the address 13 months after the pack is mailed, which covers replacements and card disputes. We keep the rest of the order record (what was bought, the amounts, the tax and the province) for 7 years for tax purposes.
• If you subscribe: we keep your mailing address, encrypted, for as long as your subscription is active so we can mail each pack, along with the status of your subscription and a record of what we've mailed you. You can change the address any time in your account.
• Your account: there are no passwords. You sign in with a single-use link sent to your email. When you sign in we set one cookie that keeps you signed in on that device. It is strictly necessary for the account to work, is used for nothing else, can't be read by scripts or other sites, and is removed when you sign out.
• Payment: handled entirely by Stripe. We never see or store your card number. Stripe's privacy policy applies to the payment itself.
• Site analytics: we run our own first-party analytics on Cloudflare. We record page views, button clicks, the page you came from, your country/region, and device type. Our analytics use no cookies, and we use no advertising pixels, fingerprinting, or third-party analytics. The account page isn't tracked at all. IP addresses are hashed with a secret salt and never stored in a readable form.
• Email: marketing email only if you tick the box beside the buy button, in the sign-up form or in your account. None of those boxes is ever ticked for you. Every marketing email has a one-click unsubscribe. We always send the email your order needs: receipts, sign-in links, mailing notices and renewal reminders.

Who we share it with

Stripe (payments), Cloudflare (hosting, bot protection), Canada Post (delivery), a Canadian company that packs and mails our envelopes, if we use one (name and mailing address only), and our email provider (Resend). That's the whole list. Our customer list is never sold, rented, traded or shared with anyone else, for advertising or anything else.

Where it lives

Cloudflare's network, encrypted in transit and at rest. Stripe stores payment data on its own systems. Some of these providers operate in the United States.

Your rights

Ask us what we hold about you, correct it, or ask us to delete it: email contact@farfarout.art. We answer within 30 days. You can complain to the Office of the Privacy Commissioner of Canada if you're not satisfied.

Children

The store is for adults (18+) to buy from. If you're younger, ask someone who loves you to order it for you.