Privacy policy – Something Dumb

Last updated: September 27, 2026

This policy explains what personal information Something Dumb (“we,” “us”) collects when you visit somethingdumb.com or buy from it, what we do with it, who we share it with, and the choices you have. It is written with the California Consumer Privacy Act, as amended by the CPRA, in mind.

What we collect

Order details: your name, email address, billing and shipping address, phone number (if you give one), what you ordered and what you paid.
Payment information: card payments are handled by our payment processor, Stripe. We never see or store your full card number. We receive only limited details such as the card brand, the last four digits and the expiry date.
Account details: if you create an account, your login email and password (stored encrypted) and your saved addresses.
Messages: anything you send us by email, including ideas you submit.
Technical information: IP address, browser and device type, pages visited and the site that referred you. This comes from server logs, our security and delivery network, and first-party cookies described in our cookie policy.

We do not collect sensitive personal information such as government ID numbers, precise location or health information.

How we use it

To take payment for, print, ship and deliver your order.
To send order confirmations, shipping and tracking updates, and replies to your messages.
To handle problems with an order, including damaged or lost items.
To prevent fraud and keep the site secure.
To keep the business and tax records the law requires.
To understand, in general terms, how people find and use the shop so we can improve it.

We don’t send marketing email unless you have signed up for it, and you can unsubscribe at any time.

Who we share it with

We share personal information only with the service providers we need to run the shop, and only what each one needs:

Printify and its print providers, which make and ship your order. They receive your name, shipping address, the items ordered and, where the carrier needs it, your email or phone number.
Shipping carriers such as USPS, UPS, FedEx and DHL, which deliver your order.
Stripe, which processes payments and screens them for fraud.
Our hosting, email and security providers, including Cloudflare, which run and protect the website and deliver our email.
Authorities, when the law requires it or to protect our rights, customers or others.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. The site does not currently run advertising or third-party analytics trackers. If that changes, they will run only after you consent, and this policy will be updated.

How long we keep it

We keep order records for as long as tax and accounting law requires, generally up to seven years. Account details are kept until you ask us to delete your account. Server and security logs are kept for a short time and then deleted. Messages are kept for as long as they are useful for handling your request.

Your California privacy rights

If you are a California resident, you have the right to:

Know what personal information we have collected about you, where it came from, why we collected it and who we shared it with.
Delete personal information we hold about you, subject to legal exceptions such as records we must keep for tax purposes.
Correct inaccurate personal information.
Opt out of the sale or sharing of personal information. We don’t sell or share it, but you can still record your choice.
Not be discriminated against for using any of these rights.

To use any of these rights, email [email protected] from the address you used to order, or include your order number. We will confirm your request within 10 business days and respond within 45 days. You may also have an authorized agent contact us for you.

Global Privacy Control

We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a request to opt out of the sale or sharing of your personal information for that browser.

Your privacy choices

Do Not Sell or Share My Personal Information

Security

The site uses encrypted connections (HTTPS), and access to customer information is limited to the people who need it to run the shop. No system is perfectly secure, so we can’t guarantee absolute security.

Children

The shop is not directed to children under 16, and we do not knowingly collect personal information from them.

Changes

We may update this policy. The current version is always on this page with its last-updated date.

Contact

Something Dumb
1223 Cleveland Ave
San Diego, CA 92103
[email protected]