Privacy Policy

We collect only what we need to run the store. Depending on how you use it, that includes the following.

Account information

If you create an account, our authentication provider, Clerk, collects your email address, your name and the sign-in method you choose. If you sign in with a password, Clerk handles it and we never see it.

Order and checkout information

• The recipient's full name, your email address and the shipping address: address lines 1 and 2, city, state, ZIP code and country. We do not ask for a phone number.
• What you ordered, prices, discounts, taxes, the shipping method, order status and status history, and any refunds.

You can check out as a guest without creating an account; we still collect the information above to fulfill the order.

Payment information

Card details are collected and stored by our payment processor, Stripe, and do not pass through our servers. If you choose to save a card, Stripe stores it. We keep only the link between your account and your Stripe customer record, plus the card brand, last four digits and expiry date so we can show you which card is saved.

Saved addresses and profile settings

If you are signed in, we store the addresses you save to your account and the first and last name in your profile settings.

Subscriptions

If you subscribe to a product, we store the plan and its price at the time you subscribed, the quantity, the delivery address, a record of your consent including the version of our recurring-purchase terms you accepted, and the subscription status reported by Stripe. Your payment method stays with Stripe; we do not store its identifier.

Gift cards

If you buy a gift card, we collect the recipient's email address and, if you add them, the recipient's name, your personal message and a delivery date. Please only give us someone else's details if you have their permission to do so.

Reviews

If you review a product you bought, we store your rating, the review title and text, and the date you submitted it. Published reviews show the rating, title, text, date and a Verified purchase label. They do not show your name.

Conversations with Floe

When you use Floe, our shopping assistant, your browser sends us your question, your first name if you are signed in, recent messages from the conversation and, if you are signed in, a short summary of your recent orders. We also receive the approximate country and region that Cloudflare derives from your connection. Section 7 explains how this is handled.

Performance data

To keep pages fast, your browser reports page performance measurements (Web Vitals). We record only the metric name, its rating, the page template with query strings and dynamic values removed, and whether the device is mobile. These records contain no cookies and no user identifiers.

Technical data

Like any website, our hosting provider, Cloudflare, processes your IP address and request details such as browser type to deliver pages, secure the site and apply rate limits. Rate limits are counted per account or per IP address. We do not store IP addresses in our store database.

Communications

If you email us, we keep your message, your email address and our reply so we can help you and keep a record of the request.

We use personal information to:

• process orders and payments, and calculate taxes and shipping;
• ship orders, provide tracking, and handle returns, refunds and warranty claims;
• create and maintain your account, saved addresses and saved cards;
• bill and fulfill subscriptions you set up;
• deliver gift cards to the recipient you choose;
• send transactional emails about your orders, and review reminders you can opt out of;
• answer your questions through Floe and through our support team;
• prevent fraud and abuse and keep the site secure, including through rate limiting and automated bot protection;
• measure and improve site performance; and
• meet our legal, tax and accounting obligations.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Performance of a contract: to process your orders, provide your account, run subscriptions and deliver gift cards.
• Legitimate interests: to keep the site secure and prevent fraud, to measure performance, to send review reminders (which you can opt out of at any time) and for internal operational reporting. We balance these interests against your rights.
• Legal obligation: to keep tax and accounting records.
• Consent: where we ask for it. You can withdraw consent at any time without affecting processing that took place before.

We do not sell your personal information. We do not share it for cross-context behavioral advertising.

We share personal information only with the service providers that help us run the store, and only for the purposes below:

We may also disclose information when required by law or to protect our rights, our customers or the public, and it may be transferred as part of a merger, acquisition or sale of all or part of our business, subject to this policy.

We use only the cookies and browser storage needed to run the store and remember your cart and conversations. We do not use advertising cookies or third-party analytics cookies.

You can clear cookies and site data in your browser settings at any time. Clearing them signs you out and empties your cart and your Floe conversation.

• Floe's answers are generated by AI models running on Cloudflare Workers AI, using our product catalog and store policies.
• Our servers do not save your conversations. The conversation is kept only in your own browser, in the chat-storage entry described above, and is deleted when you clear it.
• Please do not share sensitive information with Floe, such as card numbers, passwords or health information.
• Floe can make mistakes. For order details and policies, rely on your order pages and the policies published on this site.

• Transactional emails are sent because they are part of the service you asked for: order confirmations, shipping confirmations, refund confirmations, updates on reviews you submitted, gift card delivery, and orders created by your subscription. You will still receive them if you opt out of reminders.
• Review reminders are not transactional. Every reminder includes an unsubscribe link, and opting out stops future reminders.
• Our emails are sent through Cloudflare Email Sending from orders@mail.melt.party.

• Account information is kept while your account is open, and afterward only as long as needed to meet legal, tax and accounting obligations and to resolve disputes.
• Order records are kept for as long as tax and accounting rules require.
• Guest order status links expire 7 days after they are issued by default, and never last longer than 30 days.
• Browser storage stays on your device until you clear it.
• Operational logs are kept for a short period by our hosting provider. Our own commerce monitoring is designed to exclude payment details, email and postal addresses, and order and customer identifiers.

You can do the following yourself at any time:

• update your name and saved addresses in your account;
• remove a saved card; and
• unsubscribe from review reminders using the link in any reminder email.

Depending on where you live, you may also have the right to access, correct, delete or receive a portable copy of your personal information, to restrict or object to how we use it, and to withdraw consent. Account deletion and data export are not available as self-service options at the moment; please request them by email.

To make a request, email support@melt.party from the address linked to your account with the subject line Privacy request. We will verify your identity before acting on the request and respond within the time required by applicable law: one month under the GDPR, or 45 days under California law.

If you are not satisfied with our response, you have the right to complain to your local data protection authority.

If you live in California or another U.S. state with a consumer privacy law, this section applies to you in addition to the rest of this policy.

• Categories we collect: identifiers (such as name, email address and account details); customer records and commercial information (such as shipping addresses, orders, payment card brand and last four digits, subscriptions and gift cards); internet or network activity (such as performance measurements and request data); approximate location (country and region); the content of reviews, messages to us and questions to Floe. The sources are you, your browser, and our service providers, as described in Section 2.
• Purposes: the business purposes listed in Section 3.
• Your rights: to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be discriminated against for exercising these rights. You may use an authorized agent, and we may ask the agent for proof of authorization and ask you to verify your identity.
• Sale and sharing: we do not sell personal information or share it for cross-context behavioral advertising, so we do not offer a “Do Not Sell or Share” link. If your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of sale and sharing.

To exercise these rights, follow the steps in Section 10.

Melt Party is not directed to children under 13, or under 16 in the EEA and the UK, and we do not knowingly collect their personal information. You must be at least 18 years old, or the age of majority where you live, to place an order. If we learn that we have collected information from a child, we will delete it.

We and our service providers process personal information in the United States and in other countries where those providers operate. Where the law requires it, we rely on appropriate safeguards offered by our providers, such as the European Commission's Standard Contractual Clauses.

We protect personal information with measures that fit the risk:

• the whole site is served over HTTPS;
• card fields are hosted by Stripe, so card numbers never reach our servers;
• access to the store's administration area is restricted by permissions; and
• guest order status links are signed and expire.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us right away.

We may update this policy from time to time. When we do, we will change the Last Updated date at the top. If a change is significant, we will also post a notice on the site and, where appropriate, let you know by email.

Questions or requests about this policy or your personal information:

Email: support@melt.party
Phone: +1 (929) 206-2531
DONG LU LIMITED
Mailing address: 1521 Blake St Ste 47009, Denver, Colorado 80202, United States