TERMS & DATA
how we handle your data — last updated July 2026
we keep this short and plain. the goal is simple: hold the least amount of your data for the least amount of time, protect what we do hold, and never sell or share it.
what we collect & why
only what a drop needs. an email and username to run your account and waitlist; a password to sign in; and, when you buy, a shipping address to send your piece. that’s it — no tracking pixels, no ad profiles, no third-party analytics selling.
we don’t sell or share it
your data is never sold, rented, or handed to advertisers. we share only what a purchase strictly requires: payment is handled by our processor, and shipping details go to the carrier to deliver your piece. nothing more.
how it’s protected
passwords are hashed with Argon2id — we can never see them. personal details are encrypted at rest (AES-256), lookups use blinded indexes, and every connection is served over HTTPS with strict security headers.
what’s linked to your account — and why
Linked to you (the service can’t run otherwise): your email & username for identity, sign-in and waitlist access; your owned pieces & transfer history to prove ownership and power your inventory; your waitlist entries to grant drop access.
Not linked to your identity: a piece’s public authenticity page and its market price history (candlestick data) are tied to the piece, never to any owner’s name or email. resale prices feed the market anonymously.
Username only (pseudonymous): your comments, likes and leaderboard standing show your username — never your email or real name. you control what your username reveals.
Kept briefly: your shipping address is linked to an order only long enough to ship it, then deleted (below).
shipping addresses: 15 days, then gone
a shipping address is kept no longer than 15 days after your order ships, then permanently deleted. it is encrypted at rest (AES-256) for its entire lifespan. we don’t build an address book or keep it on file for “next time.”
no cookies
we do not use cookies, tracking pixels, or analytics scripts. the only data stored in your browser is a session token that keeps you logged in — it contains no personal information and is cleared when you log out or close the tab.
authenticity, not surveillance
each piece carries an NFC authenticity page that shows the piece is genuine — it never displays any owner’s name, email, or personal details. ownership records exist only to verify a piece, never to expose you.
erase everything, on request
you can ask us to completely delete all of your data at any time. email info@clearancestore.cc from your account email and we’ll wipe your account, personal details, and history for good — no copies kept beyond what law strictly requires.
questions
reach us any time at info@clearancestore.cc or on instagram @clearancestore.cc.
