Privacy Policy
Last updated September 2026
Relics is a small independent studio in Sri Lanka. This page explains what we collect when you visit or buy from us, why we collect it, who else handles it, and what you can ask us to do with it. It is written to describe what the site actually does — if something here does not match what you experience, tell us and we will fix one or the other.
What we collect, and why
| What | Why we need it | When |
|---|---|---|
| Your name and email address | To confirm your order and to reach you about it. | When you order, or when you create an account |
| Your phone number | So the courier can reach you to arrange delivery. Optional — you can order without one. | When you order |
| Your delivery address | To send you what you bought. | When you order |
| Your order — items, sizes, quantities, totals and how you chose to pay | To fulfil it, to keep our own accounts, and to show you your order history. | When you order |
| Anything you write in the notes field | Only what you choose to tell us about the delivery. | When you order |
| Your referral code, and whose code you entered | To credit the right person when a referral leads to an order. | When you have an account |
| Your store credit balance | To apply it at checkout. | When you have an account |
| Your IP address | To limit how often the same source can call our API, which is what stops the shop being flooded with junk orders. It is used for counting requests, not for identifying you. | On certain requests |
We do not ask for anything we do not need. There is no marketing list, no profiling, and we do not sell or rent your details to anyone.
Payment
We never see or store your card details. Cash on delivery is settled with the courier; bank transfers are made directly to our bank. If card payment is offered in future it will be handled by a payment provider on their own systems, and your card details will go to them and not to us.
Your account
Accounts are handled for us by Clerk. If you sign in with Google, Google tells Clerk your name and email address — we never see your Google password. You can sign out at any time, and you can ask us to delete your account and everything attached to it.
Cookies and what is stored in your browser
| Cookie | Purpose | Type |
|---|---|---|
| Sign-in | Keeps you signed in to your account. | Essential |
| Shopping cart | Remembers what's in your cart between visits. It stays in your browser and is only sent to us when you place the order. | Essential |
| Cookie choice | Remembers whether you accepted or declined the optional cookies, so we stop asking. | Essential |
| Site reliability | Helps us catch and fix errors quickly, so Relics stays running. | Essential |
| Product analytics | Helps us understand how visitors use Relics, so we can keep improving it. | Optional — only with your permission |
Your choice
You're always in control. Use the cookie banner on our homepage to accept or decline the optional analytics cookies, and change your mind any time with the button below.
Who else handles your data
Running a shop means using other companies for the parts we do not build ourselves. Each of these only ever gets what it needs to do its job:
| Who | What they do for us | What they see |
|---|---|---|
| Clerk | Accounts and sign-in | Your name and email address |
| Sign-in, if you choose it | That you signed in to Relics | |
| Supabase | The database your account and orders live in | Everything in the first table above |
| Vercel | Hosting and the code that runs behind the site | Requests to the site, including your IP address |
| Mailjet | Sending you your order confirmation | Your email address and what that email says |
| Resend | Telling us an order has come in | The order details in that alert, which include your name and address |
| Sentry | Error and uptime monitoring | Technical details of an error, not your order |
| PostHog | Product analytics — only if you accepted the optional cookies | How pages are used, not who you are |
Where your data is held
Relics ships from Sri Lanka, but the services above run on servers elsewhere, including in the United States and Europe. Placing an order means your details are handled on those systems.
How long we keep it
We keep order records for as long as we need them: to fulfil the order, to answer questions about it afterwards, and to keep honest accounts. Account details are kept for as long as you have an account. The request counts tied to an IP address are short-lived and exist only to enforce a rate limit. If you ask us to delete your account, we will — though we may keep the bare record of a completed order where we are required to.
What you can ask us for
You can ask us for a copy of what we hold about you, ask us to correct something that is wrong, or ask us to delete your account and its data. Email us and we will deal with it. We will not make you jump through hoops for it, and we will not charge you.
Children
Relics is not aimed at children, and we do not knowingly collect anything from anyone under 16.
Changes
If this policy changes, the date at the top changes with it. We will not quietly widen what we collect and leave this page as it was.
Contact
Anything at all about your data, ask us at orders@relics.page.
← Back to Relics