Privacy policy

Last updated: March 26, 2026

This policy describes how Lone Birch (“we,” “us”) collects, uses, and shares information when you interact with our services. Lone Birch is a handmade marketplace focused on video-first discovery and authentic maker content.

Our services include: (1) the public website lonebirch.com and related marketing pages; (2) web-based tools for sellers (account setup, Shopify connection, payouts, listings, and order visibility); (3) backend APIs and data stores that power the marketplace, checkout, and integrations; and (4) consumer-facing experiences (such as our mobile app) that connect to those APIs. Some experiences may show additional in-product notices or terms.

Information we collect

Marketing website (lonebirch.com)

  • Beta / waitlist — Email address you submit on the homepage.
  • Contact — Name (if provided), email, and message content.
  • Seller application — Name (if provided), email, store URL, social profile URL, and any optional message.

We use timing and hidden (“honeypot”) fields to reduce spam; those values are not used as personal information about you.

Seller accounts and onboarding

  • Account credentials — When you create a seller account, we collect your email address and credentials through our authentication provider (sign-in data is processed by that provider).
  • Profile and shop linkage — We store information needed to run the seller tools, such as your account identifier, connected shop identifier (for example your Shopify store domain or document reference), payout / Connect account linkage, and product or catalog data you sync or edit.
  • Media you upload — For example product-related videos and seller or shop imagery stored in our file storage.
  • Early access — If we gate the seller app, we may set a short-lived, HTTP-only cookie after you enter a valid access code so your browser remembers that you unlocked the app for a limited time.

Marketplace, checkout, and buyer activity

  • Account and profile — If you use the consumer marketplace with an account, we may store your account identifier, email, display name, saved shipping addresses, and a payment customer record with our payments processor so you can check out or save payment methods where we offer that (for example, to speed up checkout and reduce failed payments).
  • Orders and fulfillment — We process order-related information needed to complete purchases, coordinate with sellers’ e-commerce platforms, calculate tax or shipping where applicable, and handle refunds or support. That can include name, email, phone (if provided), shipping address, line items, and payment status metadata.
  • Video and product engagement — We may record how long a product video was watched, whether product details were opened, and optional “like” actions, sometimes including how far into the video the action occurred. If you are signed in, this can be associated with your account. We use this to improve recommendations and search relevance, help sellers understand what resonates, and keep the experience reliable (for example, by detecting spam or abusive behavior).

Integrations (sellers)

  • E-commerce platforms — With your permission, we can connect to your store platform to sync products, inventory, and orders and to complete checkout flows. We store the connection data (including access credentials on our servers) as needed to maintain the integration (so syncing and order routing works without you reconnecting each time).
  • Payments — We use a payments processor for checkout and seller payouts (including “connect” style onboarding for sellers). We do not store full payment card numbers on our own servers; our payments processor provides tokens and identifiers needed to complete transactions.
  • Other integrations — We may offer or retire additional connectors (for example webhooks or other commerce tooling). Those services receive only what is needed for the integration you enable.

Automatically collected technical data

  • Usage and analytics — On the marketing site we may use analytics products to understand traffic, device or browser type, approximate location, and navigation patterns.
  • Logs — Our hosting and API infrastructure may log IP addresses, request timestamps, URLs, and diagnostic data for security and reliability (for example, to detect abuse, prevent fraud, and troubleshoot outages).

How we use information

We use personal information to:

  • Provide, operate, and improve our websites, apps, APIs, and integrations;
  • Create and manage accounts, onboard sellers, and authenticate requests;
  • Process purchases, payouts, refunds, and tax or shipping where applicable;
  • Sync and display listings, inventory, and orders across Shopify and Lone Birch;
  • Send transactional or operational emails (and marketing where you have signed up or as permitted by law);
  • Measure product usage, debug issues, secure our systems, and prevent fraud or abuse;
  • Comply with law, respond to lawful requests, and enforce our terms.

How we share information

We do not sell your personal information. We share information with vendors who process data on our behalf, including:

  • Identity, database, and file storage providers — To power authentication, store account and marketplace records, and store media you upload (such as product videos and shop imagery).
  • Cloud infrastructure providers — To host and run our services, store files, and deliver content.
  • Payments processors — To process payments, refunds, and seller payout onboarding and transfers.
  • E-commerce platform providers — When you connect a store, we exchange data needed to sync listings and orders and to support checkout flows.
  • Email delivery providers — To send marketing (if you sign up) and transactional or operational emails, and to maintain mailing lists where configured.
  • Messaging providers — In some flows we may use additional providers for email or notifications.
  • Hosting providers — To host our websites, serverless APIs, and related infrastructure.
  • Analytics providers — To understand traffic and usage of our marketing website and product experiences.

Our vendors may change over time. We will update this policy as needed to reflect material changes.

We may also disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition, or asset sale, subject to applicable law.

Cookies and similar technologies

We use cookies and similar technologies for authentication sessions (through our identity provider), optional early-access gating on seller tools, analytics, and security. You can control cookies in your browser; disabling some cookies may prevent sign-in or certain features from working. We use these primarily to keep you signed in, remember your access where appropriate, and protect the service from automated abuse.

Retention

We keep information only as long as needed for the purposes described in this policy, unless a longer period is required by law (for example tax or payments records). Retention varies by data type; account, order, and integration data is generally kept while your account or a related legal obligation exists, plus a reasonable grace period.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. Marketing emails, where we send them, may include an unsubscribe link.

To exercise rights or ask questions, contact us via our contact page. We may need to verify your request. Residents of certain U.S. states or countries may have additional rights under local law.

Children

Our services are not directed at children under 13 (or the age required in your jurisdiction), and we do not knowingly collect personal information from children.

International users

We are based in the United States and use service providers that may process data in the U.S. and other countries. If you access our services from outside the U.S., your information may be transferred to the U.S. or other jurisdictions.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date. Where required or appropriate, we will provide additional notice.

Contact

For privacy-related requests, please use our contact form or the contact details we publish on the site.