Skip to content

Privacy policy

Effective October 27, 2026

What we collect when you order from Little Loaf, why, and who helps us handle it.

Who we are

Little Loaf is a home bakery run by Ava Eisenstein, Orlando, FL 32818. Questions about your information: business@littleloaf.shop.

What we collect

  • Your order: what you ordered, your bake day, how you're getting it, and the amounts paid.
  • Contact and delivery details: your email address, and for shipped orders your name and shipping address. You enter these on Stripe's checkout page and Stripe passes them to us.
  • Your mobile number, only if you ask for a text when your order is ready, with the time you agreed.
  • If you sign in with Google: your name, email address and profile picture.
  • Card details are never seen or stored by us. Payment happens on Stripe's secure page.
  • Abuse protection: when you start a checkout we store a scrambled (hashed) form of your internet address, so one visitor can't hold every spot on a bake day. We can't turn it back into your address.

Cookies and analytics

We only use cookies the site needs to work: your cart, your sign-in, and a private cookie that lets you see an order you placed as a guest. We use Vercel Web Analytics to count page visits. It doesn't use cookies or track you across other sites, and we strip order numbers and payment references from the pages it counts. No advertising trackers.

How we use it

  • To bake, ship or hand over your order, and to arrange a meetup with you.
  • To email you about your order: confirmation, ready, shipped or refunded.
  • To send the one text you asked for, if you asked for it.
  • To keep the records the law requires, such as for sales tax.

We don't send marketing emails or texts, and we don't sell your information.

Who helps us

These services handle your information only to run the shop:

  • Stripe (payments, receipts and sales tax)
  • Vercel (website hosting, analytics and product photos)
  • Neon (our database)
  • Google (sign-in, if you use it)
  • Resend (order emails)
  • Twilio (the order-ready text)
  • The postal or courier service that delivers shipped orders

Mobile numbers and text-message consent are not shared with third parties or affiliates for marketing or promotional purposes.

How long we keep it

Order records: 5 years, for tax purposes. If you ask us to delete your information, we delete everything we don't have to keep by law.

Your choices

Children

The shop isn't meant for children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update it here and change the date at the top.