GaGa Shoppers — Privacy Policy

Effective: October 23, 2026

Legal review required before production publication. The operator must identify the legal controller, contact address, retention periods and any required regional disclosures.

1. Information we process

When you create a customer account, we process your name, email address, acceptance of account terms, password hash (never the original password in storage), registration and verification timestamps, and account login events. When you choose Google sign-in, we process a verified Google account identifier, name and email. We process limited technical metadata necessary for security, abuse prevention, troubleshooting and site performance.

2. Why we use it

We use information to provide account access, maintain security, verify email addresses, send requested account recovery messages, respond to requests, prevent fraud and support shopping functionality.

3. Cookies and security

A Secure, HttpOnly customer session cookie keeps you signed in. We use an expiring authentication session and technical controls to reduce unauthorized access. Security rate-limit identifiers are stored as keyed hashes. Authentication and account recovery links expire.

4. Providers and external stores

Authentication can involve Google when you select that option. Account emails are transmitted through the configured mail provider. Hosting and database service providers process infrastructure data on our behalf. External stores and payment processors have their own privacy policies and process checkout information under those policies. We do not automatically import purchases from external websites.

5. Retention and account requests

Account and security records are retained as necessary for operating and protecting the service and fulfilling legal obligations. Data access, correction, deletion or other applicable privacy requests must be handled through the site's published customer support contact method. Technical retention and deletion procedures must be reviewed before launch.

6. Security and updates

We use encryption in transit, salted password hashing, expiring tokens and account access controls. No security measure eliminates every risk. We may update this policy and communicate material changes where required.

Read the Terms of Use for shopping and account conditions.