Privacy

Temporary payment authorizations

For products using authorization checkout, we first save your name, email, full US delivery address and requested selling-pack quantity to verify shipping for that exact product. This first step creates no card hold or order.

If you continue with a verified quote, Stripe hosts card entry and can reserve the disclosed total as a temporary hold. We save the product and SKU, quote evidence, provider identifiers, amounts, authorization deadline, review decisions and your acceptance of final terms in our private database. We do not receive your full card number or security code.

A separate browser cookie with a random token controls access to your request status. Scripts cannot read it; it contains no name or address. Keep your request link and use the same browser to review final terms. Clearing the cookie removes that browser access but does not delete the saved request.

An internal Resend notification contains the product, SKU, requested quantity, contact details and authorized amount for staff review. It does not authorize fulfillment. Availability and final terms require separate confirmation and your acceptance before capture. These pilot requests are not automatically sent to a supplier or added to a marketing list.

Contact us about accessing, correcting or deleting a request. This workflow does not currently apply a fixed automatic deletion schedule to its request and payment-review records.

Notary commission documents

For a product that requires commission proof, the saved cart requests a readable commission document. Upload only the requested evidence. We link it to that exact item and the commissioned details being verified. File receipt is not approval of the commission.

Original documents are stored privately with Supabase. Authorized staff can retrieve them to compare the commission with your requested seal and, when required, check official standing. We do not publish these files, send them to an AI service or include them in analytics. When a reviewed order is released to our manufacturing partner, the corresponding proof accompanies the order through our email provider, Resend.

We retain evidence while it is needed for the order and for applicable legal retention periods. Virginia Code §47.1-8.1 requires both the notary and the seal vendor to retain commission proof for at least five years. Our retention period cannot be shortened by deleting a cart or asking us to remove legally required proof. We retain the minimum period from fulfillment as well as receipt; operational cleanup can occur later.

Changing commissioned identity details requires a fresh proof check. Old evidence may remain for the earlier order or required retention period. Contact us about access, correction or deletion; we will explain any retention requirement that prevents deletion.

Product availability requests

An availability request is not an order. It collects your name, email and requested quantity for an exact product. A country and postal area are requested only when needed to check freight. It does not collect payment-card information or reserve stock.

We record this interest in Airtable, linked to the exact product and SKU. An internal email through Resend includes the product, SKU, quantity and contact details so our team can follow up. We do not send the request to a supplier or add you to a marketing list.

Temporary rate-limit counters use a hash of the network address. Request fields are not sent to analytics or written to browser storage. Contact us to ask about or remove your request.

Messages you send us

Our contact form sends your name, email address, message and any order number you provide to our support inbox through Resend. We use these details to answer your question.

We keep temporary counters to limit automated messages. These use a hash of the network address, not your message. Contact messages are not sent to Google Analytics or added to a marketing list.

Who runs this site

plethara.com is operated by Plethara. If you want to reach a person about anything on this page, the address at the bottom is the one to use.

What this page covers

This policy describes plethara.com — the pages you can browse today. It is written from what the site actually does, and it is dated, so you can tell when it was last true.

You can now order. Doing so collects more than browsing does, and the three sections after this one say exactly what, and who receives it.

Paying

Payment is taken by Stripe, on Stripe’s own pages. When you press Buy now you leave this site for checkout.stripe.com, and you come back afterwards. Your card number, expiry and security code are typed there, not here — they never reach our servers and we never see them.

To take the payment Stripe needs your email and a delivery address, and it may ask for a phone number. Stripe is the processor of that data and its own privacy policy governs it.

What comes back to us is the outcome: that the payment succeeded, the amounts, and identifiers for the session and payment so we can match a payment to an order and issue a refund if one is due.

Your order

When a payment completes we create an order and keep what is needed to make it and send it to you: your email, the delivery address Stripe collected, the amounts, and — for a professional seal — the name and licence number you asked to have engraved.

That last part is the sensitive one. A seal is made to a name and a number issued to you by a state board, so we cannot make one without them, and they sit in the order for as long as we keep the order.

If you tell us your name or phone number they are kept against your email so a repeat order does not start from nothing. Marketing consent is stored as off unless you turn it on, and nothing on this site turns it on today.

Making and shipping it

We do not manufacture. A seal is made to order by a U.S. manufacturing partner, who receives the delivery address, seal details and any required commission proof for the reviewed order. Required commission evidence is also subject to the retention obligations described above.

An order whose cost we cannot verify is held for a person to look at before it is sent anywhere, rather than forwarded automatically.

Google Analytics

We use Google Analytics 4 — but only if you accept it. Until you do, the tag is not loaded at all, no cookie is set and no event is sent. Declining is a real decline, not a preference we record and ignore.

Once you accept, it records that a page was viewed, and — through Google’s “enhanced measurement” — scrolling, clicks that leave the site, site searches, file downloads and video engagement. Alongside those it collects the ordinary things a browser reveals: approximate location from your IP address, device type, browser, and the page or search that sent you here.

Google Analytics sets cookies in your browser to tell one visit from the next. We do not use them to identify you by name, and we do not combine analytics data with anything you type into the site.

One thing is sent to Google from our server rather than your browser: when an order is paid, we send Google the order number, the amount and what was bought, so that sales show up next to the visits. No name, email or address goes with it, and it is sent whether or not you accepted cookies, because it is a record of a sale rather than a record of you.

Google is the processor of that data and it is subject to Google’s own privacy policy. Event-level analytics data is kept for 14 months and then deleted.

Your cart

If you put something in a cart, the site gives your browser a small cookie holding nothing but a random token. The cart itself — which product, which options — is stored on our server against that token.

The token is the only thing that connects your browser to your cart. It is not readable by scripts on the page, and it carries no name, email or address.

A cart holds whatever you typed into the order form for a seal, which for a professional seal includes the name and licence number you want engraved on it. Do not type anything there you would not want stored.

Abuse protection

To stop one caller from hammering the cart and checkout endpoints, the site counts requests per caller. It identifies a caller by their cart cookie where they have one, and by their IP address where they do not.

Where an IP address is used it is stored as part of that counter. It is not attached to a person, an order or an analytics profile.

Hosting

The site runs on Vercel, and its database is Postgres hosted by Supabase. Both act on our instructions. As with any web host, Vercel’s servers see the requests your browser makes, including your IP address, in the ordinary course of serving the page.

What we do not do

We do not sell your personal information. We do not run advertising or remarketing tags, and there is no Meta, TikTok, LinkedIn or advertising pixel on this site — Google Analytics is the only third-party script that loads.

We do not send marketing email. The field that would record consent for it defaults to off and can only be set by an explicit action you take; nothing on the site takes that action today.

Your cookie choice

The first time you arrive, the site asks whether you accept analytics cookies, and measures nothing while it waits for an answer. Your answer is remembered in your browser’s own storage — not in a cookie, and never sent to our server.

You can change it at any time from this page, using the button at the bottom. Declining, or changing your mind to decline, stops the tag loading on the next page you view.

Clearing this site’s data in your browser also clears the answer, and you will be asked again.

Controlling what is collected

The simplest control is the one above: decline, and the tag never loads. Beyond that you can use Google’s official opt-out browser add-on, or block the tag with your browser’s own privacy settings or an extension. The site works normally either way — nothing here depends on analytics running.

Clearing cookies for this site removes both the analytics cookies and your cart token, which empties your cart.

Change your cookie choice

Asking about your data

Write to us and say what you would like to know, correct or have deleted. Tell us enough to find it — for a cart, that is the page you were on and roughly when. You can use our contact form.