Accounts and orders
We use the details you provide, such as your name, email, phone number and delivery address, to sign you in, fulfill orders and send order updates. Sign-in is optional for guest checkout. Account features include order history and rewards.
The app and website store information on your device to keep your session, bag and preferences available. Signing out ends the current account session; it does not delete your past orders.
Payments
Stripe handles online card payments. Payment details are entered through Stripe's payment interface. Sugar Stack uses payment status and order totals to complete your order.
Marketing notifications
Marketing notifications in the Android app are optional. If you enable them, Firebase Cloud Messaging supplies a device token so Sugar Stack can send notifications to that device. You can turn marketing notifications off in Profile or change notification permission in your phone's settings. You can order without enabling them.
Crash reports
Android release builds with crash reporting enabled send crash reports to Google Firebase Crashlytics by default. Reports can include crash traces, app version and build, device model and operating system, and installation or session identifiers. Native crash reports can contain exception data.
We do not add your email, order details, payment details or notification token as custom crash-report fields. Our Dart error handler replaces raw exception messages with fixed error categories and filters stack traces to approved code locations. This does not make all native crash data anonymous.
Google states that Crashlytics keeps crash stack traces and associated installation identifiers for 90 days before beginning their removal from live and backup systems.
Website analytics
Our website uses Google Analytics automatically when you visit. There is no on-site consent banner or analytics off switch. Google Analytics uses cookies and browser identifiers to measure page visits, device and browser information, product views, cart activity, checkout starts and completed purchases. Purchase measurements include product names, quantities, prices, tax, delivery fees and a separate analytics transaction identifier.
We do not send your name, email, phone number, address, payment details, account ID or raw order ID as analytics fields. We remove URL queries and fragments and do not send incoming referrer URLs. Cookie and browser identifiers mean this data is not anonymous.
Our Google Analytics property uses a two-month retention setting for user-level and event-level data covered by that setting, with reset on new activity off. Deletion is processed on Google's schedule; standard aggregated reports are not covered by this setting and may remain longer. Google has its own data-processing and retention practices.
You can use Google's Analytics opt-out browser add-on in supported browsers, or browser privacy tools that block analytics. These tools may not work in every browser or device. How Google uses information from sites that use its services.
Consent and privacy rights vary by location. This notice is not a request for consent. Contact us about applicable privacy rights.
Android app analytics
Android release builds use Google Analytics for Firebase automatically, with no in-app consent banner or analytics off switch. We measure fixed screen names, product views, cart activity, checkout starts and server-confirmed purchases. Purchase measurements use product names, quantities, paid prices, tax, delivery fees and a separate analytics transaction identifier, not your account or raw order ID.
Firebase also collects app and device information, app-instance identifiers and automatic events such as first launch, app updates, sessions and engagement. Analytics identifiers are not anonymous. We do not add your name, email, phone, address, notification token, sign-in links or payment details to analytics. Advertising ID collection and ad personalization are disabled; we do not use analytics for cross-app advertising tracking.
The Google Analytics retention setting described above also applies to app data covered by that property setting. Google's browser opt-out add-on does not turn off app analytics. Contact us about applicable privacy rights. iOS analytics is not enabled in this version.
Your choices and requests
You can use guest checkout, sign out of your account and turn off optional marketing notifications. Account deletion and privacy requests are separate from signing out.
For privacy questions or account-deletion requests, email [email protected]. Include the account email so we can identify your request. Do not send passwords or payment card details.