Privacy policy
Last updated: 2026-09-06
This policy explains what Fuhlen Laboratory LLC (Massachusetts, USA) collects when you use this store, why we collect it, who else handles it, and the choices you have. The short version: there is no advertising; signing in to see your orders uses a one-time email code, not a password; the only measurement is an anonymous, cookieless visit counter; we collect what an order needs and nothing else; and we do not sell personal information.
1. Information we collect
Order information. When you buy something, we receive and keep your email address, your shipping name and address, a phone number if you choose to give one, the items and amounts of your order, and the time at which you accepted our Terms of Service. Stripe, our payment processor, collects your payment details directly; your card number never reaches our systems.
Sign-in information. When you ask to see your orders, we email a six-digit code to the address you ordered with and keep a hashed copy of it for ten minutes, with a count of attempts. When you enter it, your browser receives a signed session token that identifies your email address for up to 7 days; it lives in your browser's storage and is removed when you sign out. We do not store passwords.
Return and problem requests. If you ask for a return or report a problem from your orders page, we keep the items concerned, your note, and how the request was resolved, together with the order.
Technical information. Our servers briefly record the IP address of checkout requests to limit abusive traffic and prevent fraud. Our hosting provider, Vercel, keeps standard short-lived access logs, as any web host does. To count visits we use Vercel Web Analytics, a cookieless service that records the page viewed and an anonymized identifier that expires within a day; it cannot identify you or follow you to other sites, and we see only aggregate numbers. We run no advertising trackers.
Information on your device. Your language preference, cart contents, your sign-in session for the orders page, references to your recent orders, and an in-progress checkout draft (email, phone, terms acceptance) live in your browser's own storage, on your device. Clearing your browser data removes them; the checkout draft also clears itself when your order completes or the tab closes. The site sets no tracking cookies.
2. How we use information
We use order information to fulfil and ship your order, to answer your questions about it, to prevent fraud and abuse, to keep the records that tax and accounting law requires, and to establish or defend legal claims if that ever becomes necessary. We do not sell personal information, we do not rent or trade it, and we do not use it for advertising.
3. Who receives it
Five kinds of companies handle pieces of your information so that your order can happen: Stripe processes payment and refunds; Vercel hosts the site; Supabase hosts our order database; Resend delivers our emails to you (sign-in codes, shipping and delivery notices, refund and return confirmations) and receives your email address and the content of each message; and the shipping carrier receives your name, address, and phone number to deliver the parcel and to contact you about delivery. Each receives only what its role requires. Beyond those, we disclose personal information only when the law compels it, a court order, a subpoena, a lawful demand by a public authority, or when disclosure is necessary to protect someone's safety or to defend our legal rights.
4. Retention
Order records are kept for as long as tax and accounting rules require, generally seven years. Rate-limiting records and hosting logs are short-lived and rotate automatically. When a retention period ends, the records are deleted.
5. Security
The site is served only over HTTPS, payment details go directly to Stripe and never touch our servers, and access to the order database is restricted to the order machinery itself. No system is perfectly secure and we do not promise otherwise; if a breach ever affects your personal information, we will notify you as the law requires.
6. Your choices and rights
Email fuhlenlab@gmail.com to ask what information we hold about you, to correct it, or to have it deleted. We answer within 30 days. We honor deletion requests except for records the law requires us to keep, and we will tell you which those are. Depending on where you live, statute may grant you these same rights and more; we extend them to every customer regardless of residence.
7. Children
This store is not directed at children. We do not knowingly collect information from anyone under 18, and orders may be placed only by adults. If you believe a minor has given us personal information, contact us and we will delete it.
8. Earlier versions of this site
An earlier version of this page could create accounts and stored signup-consent records. That service is no longer operated, and this version removes any such data still present in your browser the first time it loads. A small number of signup-consent records collected by that earlier version still exist server-side; they are being retired and are not used.
9. Changes to this policy
When this policy changes, the date at the top changes with it. A material change will be noted on this page. Continuing to use the store after a change means the new policy applies.
10. Contact
Fuhlen Laboratory LLC · Massachusetts, USA · fuhlenlab@gmail.com. You can also reach us through our official stores on 有赞, 淘宝, 小红书 or 抖音.