ORANGEWAY PRIVACY POLICY
Last updated 9 October 2026.
This is what ORANGEWAY collects when you browse, chat or buy, why, who else sees it and how long we keep it. We do not sell or share personal information, and there are no ads, analytics or tracking pixels on this site. Questions and requests go to support@orangeway.net.
Browsing
Vercel serves the pages and Railway runs our API. Like any host, they see your IP address and browser with each request and keep short request logs under their own policies. We do not record which pages you look at.
The visitor counter
The number in the taskbar counts people, once a day each. To do that the API sets a cookie named visitor, a random id that expires at midnight UTC, and keeps your IP address for one day only as a code that changes daily and cannot be turned back into the address. Nothing links one day to the next.
Switch it off below and you are never counted and get no cookie. A browser that sends Global Privacy Control is treated the same way automatically.
Stored in your browser
Your cart (cart), your Messenger sign-in and recent lines (lobby), whether you switched off the counter (visits-optout), whether Messenger turned you away (chat-age-refused) and whether you closed the pop-up (popup-closed, until you close the tab). They stay on your device. Clearing this site’s data removes them.
Messenger
Your screen name, picture and status are public to everyone in the lobby. Chat lines live only in our server’s memory, for at most 24 hours, and are never written to the database, so a restart erases them.
Every message is checked by our own filters and by OpenAI’s moderation model, which receives the text of the message and nothing else: no name, no address.
We keep evidence, not conversations: messages the filters refused, a reported line with the five before it, and every line of someone who is banned. Evidence is stored with the sender’s IP address and browser for 90 days, or longer while a ban or a legal hold applies, and can be handed to law enforcement on a valid legal request. Staff alerts in Discord name a message by its number, never by address.
Messenger asks for your month and year of birth. We use the answer once, to check you are 18 or older, and never store it.
Buying with a card
Checkout happens on Stripe’s page. Stripe takes your card, name, email and shipping address; we never see the card number. To place your order we send your name, email and address to Printify, who print and ship it and email you tracking. Our own database keeps only the Stripe reference, the order’s status, its total and how many garments it had. Your confirmation email comes from support@orangeway.net.
Buying with crypto
You pay from your own wallet on MoonPay’s page. We keep the name, email and shipping address you give us to place the order: an unpaid order’s details are deleted when it expires after 3 days, a paid order’s 90 days after it is placed. We keep the payment’s transaction id for good, so the same payment cannot be used twice. Transactions on a public blockchain are public by nature.
Who else handles it
Each of these works for us under its own privacy policy.
| Who | Does | Receives |
|---|---|---|
| Vercel | Hosts the website | IP address and browser, per request |
| Railway | Runs our API, database and backups | Everything we store, encrypted at rest |
| Stripe | Card checkout | Card, name, email, shipping address |
| MoonPay | Crypto checkout | Wallet and payment details |
| Printify | Prints and ships orders | Name, email, shipping address |
| Purelymail | Order and support email | Email address, messages |
| OpenAI | Checks chat messages | Message text only |
| Discord | Alerts for our staff | Order and message numbers only |
Backups
The database is backed up encrypted: a copy a day for 7 days, and a copy a month for 6 months. Something deleted from the database is gone from backups once the last copy holding it expires.
Under 18
Some of our designs are not for kids, so this site is for adults only. Checkout asks you to confirm you are 18 or older, and Messenger turns away anyone younger without keeping anything. If you think someone under 18 has used Messenger or bought from us, email support@orangeway.net and we will erase what we hold about them.
Your choices
Email support@orangeway.net to ask what we hold about you, to correct it or to delete it. We answer within 30 days. We do not sell or share personal information as California law defines it, and we honour Global Privacy Control. Evidence under a legal hold is deleted when the hold ends.
Changes
When this changes, the date at the top changes with it.
EOF