Privacy Policy

The Cookie Drop (“we,” “us,” or “our”) operates mycookiedrop.com. This policy explains what information we collect when you order cookies, sign up for our mailing list, or otherwise use the site, how we use it, and the choices you have.

We keep this simple on purpose: we're a small, local bakery, not an ad business. We don't sell your information, and we don't use advertising or tracking cookies.

When you place an order: checkout is handled entirely by Stripe, our payment processor. We receive your name, email address, and order details (what you bought and how much you paid) once the order completes. We never see or store your full card number — Stripe handles that directly.

When you join our mailing list: just your email address, whether you signed up from the footer or a “notify me when back” prompt on a sold-out item, and when you signed up. Nothing else.

When you contact us: whatever you send us directly, e.g. by email.

We don't use analytics or advertising trackers, and we don't collect browsing history. The shopping cart is stored only in your own browser (local storage) and is never sent to us until you check out.

• To fulfill and deliver your order within Urbana, MD
• To send an order confirmation/receipt email
• To send mailing-list emails, if you've opted in — new flavor announcements, weekly drops, and promo codes
• To respond if you contact us with a question or request
• To keep basic stock counts accurate for each week's drop

We use a small number of service providers to run the site, each of which only sees what it needs to do its job:

• Stripe — payment processing. Stripe handles and stores your payment details directly; we never do.
• Postmark — delivers our order receipt and mailing-list emails on our behalf.
• Firebase / Google Cloud — hosts the site and stores mailing-list and order-stock data securely.

We don't sell, rent, or trade your information to anyone else, for any reason.

We keep order records for as long as needed for bookkeeping and customer support. Mailing-list addresses are kept until you unsubscribe or ask us to delete them.

Unsubscribing:every mailing-list email includes an unsubscribe link, or you can email us and we'll remove you.

Requesting deletion: email support@mycookiedrop.com and ask us to delete your information. We'll remove your mailing-list entry immediately; order records may be kept briefly for legitimate bookkeeping/tax purposes before deletion.

Correcting your information: just email us and let us know what needs updating.

This site isn't directed at children, and we don't knowingly collect information from anyone under 13.

If this policy changes, we'll update this page and the “Last updated” date above.

Questions about this policy or your information? Reach us at support@mycookiedrop.com or via our Contact page.