Privacy Policy.
What we collect, why we collect it, and what we do with it.
Last updated: September 2026
Who we are
Nouri Narie operates www.nourinarie.com. Questions about this policy can be sent to hello@nourinarie.com.
What we collect
When you place an order we collect your name, email address, shipping address, and the items you ordered. Payment is handled entirely by Stripe — we never see or store your card number.
When you create an account or sign in, we store your email address and a record of your orders so you can view them and request returns.
The Ritual Door keeps your selected ritual and optional private note in your browser. If you ask us to email that ritual, we receive your email address, the ritual you selected, the note you chose to include, and any separate marketing preference you checked. The private note is sent in that requested email but is not stored in our database.
If you request email updates, we collect the address you provide, the consent timestamp, the consent wording/version shown at signup, a limited abuse-prevention IP record, the signup source (footer, popup, or Ritual Door), and the status of your confirmation or unsubscribe request. We use a double opt-in link so an address is not added to marketing mail until its owner confirms it.
We do not collect browsing data, use advertising trackers, or sell personal information to third parties.
Why we collect it
Your email and shipping address are used to process and deliver your order, and to send you order and shipping confirmations. A Ritual Door email address is used to send the ritual you explicitly requested. Requesting that service email does not add you to a marketing list; marketing requires the separate optional checkbox.
Email updates
Email updates are occasional product, ingredient, and ritual notes. They are sent only to confirmed subscribers who gave separate marketing consent. Each message includes an unsubscribe link. A later signup after an unsubscribe starts a new confirmation cycle and still requires the address owner to confirm.
How we store it
Order and account data is stored in a Postgres database accessed through the Vercel/Neon integration. The system prunes contact and Ritual Door request ledgers after 30 days, expired login-token rows after seven days, and pending newsletter records after 90 days.
Saved ritual choices and private notes remain on your device unless you ask us to send the note in an email. A requested Ritual Door email is recorded in a limited delivery ledger for rate limiting and delivery status; the private note is not stored in that ledger.
Your rights
Depending on where you live and where the business operates, privacy law may give you access, correction, deletion, portability, objection, or other rights. Email hello@nourinarie.com with the subject line "Privacy request". The applicable law, identity-verification process, response timeline, and exceptions must be confirmed by the business and qualified counsel.
Cookies and local storage
Your cart, any ritual you choose to keep, and your email-popup dismissal or signup preference are stored locally in your browser. Popup dismissal is kept for 30 days; no email address is stored in local storage. A secure __Host-nn_session session cookie is used when you sign in to your account. We do not use advertising or analytics cookies. Clearing browser storage removes these local choices from that device.
See our Cookie Policy for the storage keys, session-cookie attributes, and browser resources used by the site.
Third parties and cross-border processing
Stripe — processes payments. Their privacy policy is at stripe.com/privacy. Service providers may process or store information outside Quebec or Canada, subject to their own safeguards and applicable law.
Neon — hosts the application database used for orders, accounts, and limited delivery ledgers.
Resend — delivers order, account, contact, and explicitly requested Ritual Door emails.
Vercel — hosts the website. They receive your IP address and browser details in server logs per their policy at vercel.com/legal/privacy-policy.
Google Fonts and cdnjs — provide fonts and animation libraries requested by the browser.
Easyship or Stallion — may receive destination and parcel details when live shipping-rate flags are enabled. These integrations are optional and must be included in the final provider inventory if enabled.
We do not sell your personal information.
Changes
If we make material changes we will update the date at the top of this page. We will not retroactively apply new terms to data already collected.