Privacy Policy
Last Updated: March 2026
1. Who We Are
Cynic & Spore Labs LLC is a physical goods e-commerce business operating from Longmont, CO. We sell sterile mycology substrates and related cultivation materials. Our website is located at www.cynicandspore.com.
2. Data We Collect
Order Data: Name, email address, shipping address, and payment method (via Stripe — we do not store card numbers). This data is required to fulfill your order.
Laboratory Ledger (Waitlist): Email address and consent timestamp, collected only when you voluntarily subscribe. Double opt-in confirmation is required.
Usage Data: Anonymous page analytics via Vercel Analytics (no cookies, no cross-site tracking).
IP Addresses: Collected at waitlist signup and confirmation for GDPR compliance documentation.
3. How We Use Your Data
— To process and ship your physical order.
— To send order confirmation and shipping notifications.
— To notify Laboratory Ledger subscribers of release notifications (one email per release).
— To maintain batch certificate records accessible via QR code on your Manifest Card.
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not send newsletters or unsolicited promotional email.
4. Stripe (Payment Processing)
All payments are processed by Stripe, Inc. We do not receive or store credit card numbers, CVVs, or full card details. Stripe's privacy policy applies to all payment data. We receive only confirmation of payment and the shipping address provided during checkout.
5. Data Security
Customer data is stored in Supabase (PostgreSQL) with row-level security enabled. Service-role credentials are not exposed to the client. All data in transit is encrypted via TLS. We do not store payment instrument data.
6. Data Retention
Order records are retained for 7 years for tax and business compliance purposes. Batch certificate records are retained indefinitely as they are permanently linked from physical Manifest Cards already in circulation.
Laboratory Ledger records are retained while your subscription is active. You may unsubscribe at any time using the signed link in any Laboratory Ledger email or via the request handling at /unsubscribe.
After unsubscribe, we may retain minimal suppression/compliance data to ensure we do not send further Laboratory Ledger notifications to the same address unless you explicitly opt in again.
7. Email Communication Scope
Unsubscribe controls apply to Laboratory Ledger batch-drop notifications. Transactional emails related to active orders (checkout confirmation, fulfillment updates, and support-critical notices) may still be sent as required to complete your purchase.
8. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing lab@cynicandspore.com. Note that batch certificate data tied to physical Manifest Cards already in circulation cannot be deleted, as it is referenced by QR codes on physical goods.
9. Contact
Privacy inquiries: lab@cynicandspore.com