Privacy Policy.

This website, shannonsassycakes.com, belongs to Shannon’s Sassy Cakes, a home-style bakery making cakes, pies and cookies to order. In this policy, “we”, “us” and “our” mean Shannon’s Sassy Cakes, and “you” means anyone who visits the site or places an order.

This Privacy Policy explains what personal information we collect when you browse the site, order online, request a custom cake quote, join our newsletter or chat with Sugar, our website assistant. It also explains who helps us run those features, how long we keep the information and the choices you have.

We only collect what we need to bake your order, get it to you and keep in touch when you ask us to. We do not sell your personal information, and we never will.

Information you give us:

• Your name, email address and phone number
• Your order details: items, flavors, quantities, the date you need it and pickup or delivery
• A delivery address, if you choose delivery
• Notes and design details you share, such as a message for the cake, allergies or event details
• Messages you type to Sugar, our chat assistant

Information collected automatically: basic technical data your browser sends when you visit, such as your IP address, browser type, device type and the pages you view. See Sections 10 to 12.

Information from our payment provider: Stripe tells us whether a payment succeeded, the amount, and the card brand and last four digits. We never receive or store your full card number.

When you order through the order panel on our site, we collect the details in Section 3 so we can confirm your order, put it on Shannon’s calendar, bake it and hand it over at pickup or delivery. You will get an email confirmation with a PDF invoice, and if you choose, a reminder the day before your date.

When you use the “Request a custom cake” form, we collect your name, phone, email, the date you need, what you have in mind, how many people it serves, pickup or delivery, a delivery address if needed, and the details you write. Shannon uses this to price your cake and email you a quote with a secure payment link.

Payments are processed by Stripe, one of the largest payment companies in the world. Your card details are entered directly into Stripe’s secure payment form and go straight to Stripe. They never touch our website or our server.

If an order is paid with a deposit, Stripe securely saves your card so the remaining balance can be charged automatically a few days before your date, as shown at checkout. We never see the full card number, and we only use the saved card for the balance of that order.

We send transactional emails from orders@shannonsassycakes.com: order confirmations with your invoice, quotes, reminders, “your order is ready” notices and balance receipts. Replies to these emails come straight to Shannon. These emails are part of filling your order, so they are not marketing and do not need a separate opt-in.

If you sign up for our newsletter, we collect your email address and send you holiday order dates, new flavors and occasional sweet deals. The list is managed by Kit (formerly ConvertKit). You will get a confirmation email first, and every newsletter has an unsubscribe link at the bottom.

Sugar is an AI assistant that answers questions about our menu, prices and ordering. When you send Sugar a message, your message and the recent chat are sent to our AI provider, Anthropic, to generate a reply. Please do not type sensitive information such as card numbers into the chat.

We do not save your chats on our server. The conversation is kept only in your own browser tab and disappears when you close it or tap “Start over”. To prevent abuse, our server keeps a short counter of how many messages were sent, tied to a scrambled (hashed) version of your IP address, for 24 hours.

We use Plausible Analytics to see simple totals, such as how many people visited and which pages are popular. Plausible does not use cookies, does not collect personal information and does not follow you to other websites. All data is aggregated, so no one, including us, can identify individual visitors.

We do not use advertising or tracking cookies. Here is everything the site stores in your browser:

• Stripe cookies (__stripe_mid and __stripe_sid): set by Stripe’s payment script to prevent fraud and keep payments secure. They last up to one year and 30 minutes respectively.
• Your cart: the items you add are saved in your browser tab (session storage) so they are still there if you close the order panel. They clear when you close the tab.
• Your chat with Sugar: kept in session storage the same way, and cleared when you close the tab.
• Login cookies: only for Shannon and site staff signing in to manage the website. Visitors never get these.

Because we only use what the site needs to work, there is no cookie banner. You can block or delete cookies in your browser settings, but online payment may not work without Stripe’s cookies.

The website runs on a server located in Germany, managed by our web developer under a data processing agreement. Like every web server, it keeps short technical logs of requests (IP address, date and time, browser, page requested) to keep the site stable and secure and to block attacks.

We protect your information with encrypted connections (HTTPS), restricted admin access with two-factor login, regular updates and limited access to order data.

We share personal information only with the service providers that help us run the bakery and this website, and only as much as they need:

• Stripe: payments
• Kit: newsletter, if you sign up
• Anthropic: replies from Sugar, our chat assistant
• Our hosting provider and web developer: running and maintaining the website
• Email delivery services: sending order emails

We may also share information if the law requires it, to protect our rights or safety, or if the business is ever sold or transferred. We do not sell or rent your personal information, and we do not share it for advertising.

We keep personal information only as long as we need it:

• Orders and invoices: up to 7 years, for tax records
• Unpaid quote requests: up to 12 months
• Newsletter: until you unsubscribe
• Chat messages: not stored on our server
• Server logs: up to 30 days

When information is no longer needed, we delete it or make it anonymous.

You can ask us at any time to:

• Tell you what personal information we have about you
• Correct information that is wrong or out of date
• Delete your information, unless we must keep it for tax or legal reasons
• Stop sending you newsletters (or use the unsubscribe link in any newsletter)

Just email orders@shannonsassycakes.com. We will reply within 30 days and may ask you to confirm it is really you before making changes. Depending on the state you live in, you may have additional privacy rights, and we will honor them.

Some browsers send a “Do Not Track” signal. We do not track visitors across other websites, use advertising cookies or allow third parties to track you on our site, so our site works the same whether or not this signal is turned on.

Our site is meant for adults placing bakery orders. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email us and we will delete it.

We are a US business serving customers in the United States. Our website server is located in Germany, and some of our service providers (such as Stripe, Kit and Anthropic) process data in the United States. By using the site, you understand that your information may be stored and processed in these countries.

We may update this policy when our services or the law change. The “Last updated” date at the top shows when it last changed. If we make important changes, we will make them clear on this page.

Questions about this policy or your information? We are happy to help.