Privacy Policy

1. Information We Collect for Bakery Accounts

When you build a draft preview page on PieSlot, submit a White-Glove menu setup form, or operate an active bakery storefront, we collect and store only the business and configuration details needed to host your page and authenticate you as the owner:

How Bakery Owner Sign-In Works: PieSlot protects your Kitchen Bake Sheet and menu editor with a Bakery Owner Access Key. Our database stores only a one-way cryptographic SHA-256 hash of that key (owner_token_hash) — never the plaintext key. When you sign in as a bakery owner, your browser stores a strict first-party HttpOnly, Secure, SameSite=Lax session cookie named __Host-pieslot_owner, which is verified against your bakery's stored token hash on each owner request. Your setup email address is never exposed to anonymous public visitors.

2. Customer Pie Pre-Orders on Verified Live Bakery Pages

Only verified live bakery pages accept real customer holiday pre-orders. Fictional demonstration pages (such as /b/hearth-and-crumb) and unverified draft preview pages block live customer submissions so personal contact details are never collected on test pages.

When a customer reserves holiday pies on a verified live bakery storefront, PieSlot collects:

• Customer contact details: Customer full name, phone number, and email address.
• Holiday reservation details: Selected pies and quantities, chosen pickup date and 2-hour pickup window, optional order or dietary notes, and an automatically assigned PIE-XXXX counter pickup code.

Shared Only with That Specific Bakery: Customer pre-order information is made available exclusively to that single fulfilling bakery (via its authenticated Kitchen Production Bake Sheet, counter pickup roster, and CSV export) solely so the bakery can bake the order, label boxes, contact the buyer if there is a pickup question, and check the customer in at pickup. PieSlot never displays real customer pre-orders publicly, never shares customer rosters between bakeries, and never sends PieSlot marketing messages to a bakery's pie buyers.

3. Payment Processing via Stripe

PieSlot Seasonal Passes (buy.stripe.com): All payments from bakeries for PieSlot Early-Bird, Standard, and White-Glove Seasonal Passes are processed directly by Stripe on Stripe-hosted checkout pages (buy.stripe.com). PieSlot never sees, processes, or stores your credit card number, CVV security code, or bank account credentials on our servers. Stripe provides us with confirmation of payment status, plan selected, and billing contact name/email so we can verify your bakery page, apply promotional credits, and issue refunds upon request.

Customer Pie Payments to Bakeries: PieSlot charges 0% commission and does not process pie buyer payments on behalf of bakeries. Depending on how an individual bakery configures its storefront, pie buyers either pay the bakery at pickup or pay directly through the bakery's own checkout provider (such as Square, Stripe, or Venmo), governed by that provider's own privacy policy.

4. Zero Sale of Personal Data, Cookies & Infrastructure

Zero Sale or Sharing for Advertising: PieSlot never sells, rents, trades, or licenses personal data belonging to bakery owners or pie customers to third parties, ad networks, or data brokers.

Cookies & Basic Visit Logs: For ordinary visitors and pie buyers browsing a bakery menu, PieSlot sets zero advertising or cross-site tracking cookies. Our only application cookie is __Host-pieslot_owner, set strictly when a bakery owner creates or signs in to manage their own page. We log anonymous request timestamps (without storing visitor names or cross-site profiles) to monitor site reliability and peak holiday traffic.

Hosting & Service Providers: PieSlot is hosted on Cloudflare Workers and Cloudflare D1 database infrastructure, with bakery pass billing handled by Stripe. We disclose stored records outside these core infrastructure operations only if required to comply with a valid legal obligation.

5. Data Access, Export, Correction & Deletion Requests

Bakery owners can update menu items, capacities, pickup schedules, and payment instructions at any time inside their owner editor, and can export their pre-order list to CSV in one click.

Both bakery owners and pie customers can request access to their personal data, ask us to correct inaccurate information, or request complete deletion of a bakery page, setup inquiry, or customer pre-order record at any time — at no cost.