Legal

Privacy Policy

Last updated October 18, 2026

Pukka Crafted (“we”, “us”) makes handcrafted leather goods in Tokyo and sells them at pukkacrafted.com. This policy explains what personal information we collect, why, who we share it with, and the choices you have. We keep it short because we collect very little.

What we collect

Newsletter and early access. Your email address, and where and when you signed up.
“Notify me” requests. Your email address and the product you asked about.
Messages. If you use our contact form: your name, email address, the topic, and your message.
Your account. Your email address. We sign you in with a one-time code sent by email, so there is no password. If you add them, we also keep your name, phone number, saved addresses, wishlist and order history.
Orders. When checkout opens: your name, shipping and billing address, email, phone number if you give one, what you ordered and the total. Payments are handled by our payment processor; we never see or store your full card number.
Technical data. Our hosting provider processes your IP address and basic request details to deliver the site and keep it secure. To stop abuse, we keep short-lived counters tied to a scrambled (hashed) version of your IP address or email, never the readable value, and delete them within about two days.

We do not run advertising trackers or third-party analytics. We do measure how the site is used with our own simple, cookie-free analytics, described below. If any of this changes, we will update this page first.

Site analytics

To understand which pages are useful and whether the shop works, we record basic visit events ourselves, in our own database: the page viewed, which product pages and add-to-bag or checkout steps were used, the website or campaign link that sent you (if any), your country and whether you are on a phone, tablet or computer. Each visit gets a random identifier held in your browser’s session storage, which disappears when you close the tab. We do not store your IP address, your browser’s identifying details, your name or your email in these records, and we do not link them to your account or orders. We do not count visitors whose browser sends a Do Not Track or Global Privacy Control signal, and we ignore automated crawlers. We keep these records for up to 13 months.

How we use it

To reply to your messages and requests.
To send your sign-in code and other messages about your account or an order.
To send our newsletter, early access news and product updates, only if you signed up.
To tell you when a product you asked about becomes available.
To take, ship and support orders, and to keep the records the law requires.
To protect the site against spam, fraud and abuse.

Email

We send marketing email only to people who signed up for it. You can unsubscribe at any time using the link in any marketing email, or by asking us through the contact form. Emails that are part of a service you asked for, such as sign-in codes and order updates, are not marketing and may still be sent.

Cookies and similar technology

We do not set advertising or tracking cookies. When you sign in, your browser stores a session token in local storage so you stay signed in; it is removed when you sign out. Our analytics use only a random identifier in session storage (gone when you close the tab), and, if you are the site’s administrator, a flag in local storage that excludes your own visits. Our pages load fonts from Google Fonts and, for now, some product images from image hosting services, so those providers can see your IP address when your browser fetches them.

Who we share it with

We share personal information only with the service providers that help us run the shop, and only as needed for them to do that job:

Supabase, our database and sign-in provider. Our data is stored in its US East (N. Virginia) region.
Vercel, which hosts the website and runs its server functions.
Brevo, which delivers our email, such as sign-in codes and notifications to us, and our newsletter once it starts.
Our payment processor, when checkout opens, to take your payment.
Shipping carriers, who receive your name, address and phone number to deliver your order.
Authorities or advisers, where the law requires it or to protect our rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Where it is processed

Our goods are made in Tokyo, Japan, and we sell first to customers in the United States. Your information is stored with our providers in the United States and may be accessed by us from Japan.

How long we keep it

Newsletter signups: until you unsubscribe.
“Notify me” requests: until the product launches and we have told you, or until you ask us to remove it.
Messages: as long as needed to deal with your request, and a reasonable time afterwards.
Orders and related records: as long as tax, accounting and consumer law require.
Accounts: until you ask us to delete yours.
Site analytics records: up to 13 months.

Security

We protect your information with encryption in transit, database access rules that limit each person to their own data, and restricted access for our own team. No system is perfectly secure, but we take care to keep what we hold to a minimum.

Your choices and rights

You can ask us to tell you what we hold about you, correct it, delete it, or stop emailing you. Use the contact form and we will respond within 45 days, after confirming it is really you.

California residents have the right to know what personal information we collect and how it is used, to request deletion and correction, to opt out of the sale or sharing of personal information (we do neither), and not to be treated differently for using these rights. If you live elsewhere, you may have similar rights under local law, and we will honour them.

Children

The site is not meant for children under 13, and we do not knowingly collect their information. If you think a child has given us personal information, tell us and we will delete it.

Changes

If we change this policy, we will update the date above and, for significant changes, tell newsletter subscribers.

Contact

Questions about this policy or your information? Send us a message.