Privacy Policy

Ma Petite Ruby (“we,” “us,” “our”) operates mapetiteruby.com, an online store for small-batch gourmet cookie boxes, based in Central Florida. You can reach us at support@mapetiteruby.com.

What you give us: your name, email, phone number, delivery address (Florida only), the contents and history of your orders, your account password (stored as a secure one-way hash, never in plain text), any message you send through our Contact or Catering forms, and any review you write.

What we don't collect: we don't use Google Analytics, the Meta/Facebook Pixel, or any third-party advertising or tracking cookie. The only cookie this site sets is one essential, encrypted session cookie that keeps you signed in — it can't be read by other sites and carries no tracking ID.

Our own visit counter: we keep a simple, first-party count of page views for our own use (which pages are popular, roughly how many people visit) — not a cookie, and not shared with anyone. It's tied to a random id stored only in your browser, never to your name, email, or account.

From payment: we never see or store your card number. Payment is handled entirely by Stripe, a PCI-certified payment processor; we receive only a confirmation that payment succeeded and a reference number.

To fulfill and deliver your order, send order/shipping/account emails, run the Ruby's Club rewards program, answer your messages, prevent fraud and abuse (for example, by limiting repeated requests from the same source), and improve the site.

We do not sell your personal information, and we don't share it with anyone beyond the service providers below.

• Stripe — payment processing
• Resend — sending transactional emails (order confirmations, receipts, account emails)
• Supabase and Vercel — our database and hosting; infrastructure only, they don't market to you
• Carriers (USPS/UPS, via Pirate Ship) — only your name and shipping address, to deliver your box

We do not share your information with advertisers or data brokers.

Order records are kept for accounting and warranty/claim purposes. An account that's never confirmed and never used is automatically deleted after 14 days. You can ask us to delete your account and personal data at any time at support@mapetiteruby.com, except where we're required to keep order or payment records for tax or legal reasons.

View and update your details any time at mapetiteruby.com/account.

You can unsubscribe from marketing emails at any time (every such email will carry a link); this never affects order or account emails, which we need to send to serve your order.

To ask what personal data we hold about you, or to have it corrected or deleted, write to support@mapetiteruby.com.

This site isn't directed at children, and we don't knowingly collect information from anyone under 13.

Passwords are stored with a one-way cryptographic hash, never in plain text. Account-confirmation and password-reset links are single-use and expire automatically. All traffic to this site is encrypted (HTTPS).

We may update this page from time to time; the date above shows when it last changed.

Questions about this policy: support@mapetiteruby.com