Privacy Policy
We keep this short and plain. Here is exactly what data we collect, why, and how we handle it.
Last updated: June 2026
Who We Are
Nekurai is a Texas-based resale shop operating at nekurai.com. We are the sole data controller for information collected through this website. Contact us at contact@nekurai.com.
What We Collect
Shop customers — when you make a purchase:
- ▸Name, email address, shipping address
- ▸Order details (items, amounts, dates)
- ▸Payment confirmation data from Stripe (we never see or store full card numbers)
- ▸IP address and browser type (collected automatically by our hosting platform)
Contact form submissions — when you reach out:
- ▸Name, email address, and the message you send
- ▸We do not require a phone number, though you may provide one
Newsletter subscribers — if you opt in to new-drop alerts:
- ▸Your email address only, stored in our own database
- ▸Every alert includes a one-click unsubscribe link — opt out anytime
All visitors — automatically, in aggregate:
- ▸Anonymous usage analytics via Google Analytics 4 — pages and products viewed, searches, add-to-cart and purchase events — tied to a first-party cookie, not to your identity
What we do NOT collect:
- ▸Advertising pixels, remarketing tags, or cross-site ad tracking — none (our only analytics is first-party Google Analytics, used in aggregate)
- ▸Social media data — no OAuth logins, no tracking across platforms
- ▸Biometrics, location data beyond shipping address, or sensitive personal information
How We Use It
- ▸To fulfill orders: Process payments, pack and ship items, handle returns.
- ▸To communicate: Respond to inquiries, send order confirmations and tracking updates.
- ▸To protect our business: Document transactions to dispute fraudulent chargebacks or misrepresentation claims.
- ▸We do not sell, rent, trade, or share your data with third parties for marketing purposes. Ever.
Third-Party Services
We use a small number of third-party services that may process your data:
Payment processing
Handles all card data. We receive only a payment confirmation and last-4 digits. Stripe is PCI-DSS compliant.
Secondary marketplace
Listings cross-posted to eBay are subject to eBay's privacy policy. We comply with eBay's Marketplace Account Deletion requirements.
Website hosting
This site is hosted on Vercel, which may collect access logs (IP, browser, request timestamps). See Vercel's privacy policy.
Site analytics
We use Google Analytics 4 to measure aggregate, non-identifying site usage so we can improve the shop. It sets first-party analytics cookies. We do not use Google Ads remarketing or share your data for advertising.
Email delivery
Sends our transactional email (order confirmations, tracking updates) and new-drop alerts on our behalf. It receives only the recipient email address and the message content.
Database
Order and site data is stored in a managed Postgres database. Data is encrypted at rest and in transit.
Data Retention
- ▸Order records: Retained as required for tax and accounting record-keeping (typically several years), then deleted.
- ▸Contact form submissions: Retained for up to 2 years for reference, then deleted.
- ▸Newsletter subscribers: Your email is kept until you unsubscribe (one click in any alert), after which it is removed from our list.
Security
All data transmission to and from nekurai.com is encrypted via HTTPS/TLS. Database access is restricted and authenticated. Admin areas require secure login credentials. Passwords are hashed using bcrypt and are never stored in plain text.
No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify affected parties promptly and take immediate steps to contain and address the incident.
Your Rights
You have the right to:
- ▸Access the personal data we hold about you
- ▸Correct inaccurate information
- ▸Request deletion of your data (subject to legal retention requirements)
- ▸Opt out of any future marketing communications (we send very few)
- ▸Request a copy of your data in a portable format
To exercise any of these rights, email us at contact@nekurai.com with your request. We will respond within 10 business days.
eBay-specific data deletion requests are handled in accordance with eBay's Marketplace Account Deletion/Closure notification requirements via our webhook endpoint.
Contact
Questions, concerns, or requests related to this policy should be directed to: