Privacy Policy

This site is run by Lit on Fire Coins, a seller of coins, bullion, paper money, jewelry and watches that ships from the United States. For any privacy question, contact us through the Contact page.

When you buy something

Checkout runs on Stripe, our payment processor. When you pay, Stripe passes us your name, email address, shipping address, a phone number if one was provided, what you bought, the shipping speed you chose, and the amounts paid. We use these to fill your order. Your card number is entered on Stripe's page and never reaches this site or our records.

When you send a message

The Contact form sends your name, email address, your message and, if you asked about a specific piece, its item number. It is delivered to our email inbox. The site itself does not keep a copy.

When you browse

You can browse and buy without an account, and we do not use analytics, advertising or tracking tools. Like any website, our hosting provider records basic technical details of each visit (such as your IP address, browser type and the page requested) in server logs used to run and secure the site. Product photos are loaded from eBay's image servers, so eBay receives the same basic technical details when your browser fetches a photo.

Signing in is optional. Its only purpose is to show you the orders you have placed on this site. You can sign in with Apple or with Google; we never see or store your Apple or Google password.

• Apple or Google tells us your email address and, if you allow it, your name. Google may also include a link to your profile photo. We do not show or use the photo.
• If you choose Apple's Hide My Email, we receive a private forwarding address from Apple instead of your real email.
• Supabase, which runs sign-in for us, creates an account number for you and keeps that number, your email, your name if shared, which service you signed in with, and when you signed up and last signed in. To keep sign-in secure it also records the IP address and browser of each sign-in.

To show your orders, we look for orders whose checkout email is the same as the email Apple or Google confirmed for you. Orders are not otherwise linked to your account. If you used Hide My Email, orders placed with your usual email will not appear.

You can delete your account at any time from the Account page with the Delete my account button. That removes your sign-in record. Your past orders stay in our sales records, as described below, but nothing connects them to an account any more.

• To take payment, pack and ship your order, and buy the shipping label.
• To email you about your order: a confirmation when you pay and a tracking number when it ships.
• To answer messages you send us.
• To keep each piece from selling twice. When a piece sells here, the site tells eBay to end that listing. Only the eBay item number is sent; none of your details are.
• To keep records of sales for our tax and accounting needs, and to look into a problem with an order if one comes up.

We share your information only with the services that help us run the shop, and only what each one needs:

• Stripe processes your payment and collects your contact and shipping details on its checkout page.
• Supabase hosts the database where your order record is stored, and runs sign-in if you choose to sign in.
• Apple or Google, only if you sign in with them: they confirm who you are and learn that you signed in to this site.
• Resend sends our order emails and delivers Contact form messages to our inbox.
• EasyPost and the US Postal Service receive your name, shipping address and email address so we can buy a label and deliver your package.
• eBay receives the item number of a piece that sold here, and serves the product photos you see.
• Vercel hosts the site and keeps its server logs.
• Elevare Studio, the studio that built and maintains this site, can see order records so it can keep the shop running and support us.

We do not sell your personal information, and we do not share it for advertising. We may also disclose information if the law requires it, or to protect our rights in a dispute over an order.

This site sets no advertising, analytics or tracking cookies, so there is nothing to opt out of and no cookie banner. The site sets only sign-in cookies. If you sign in with Apple or Google, the site stores cookies whose names start with “sb-” that keep you signed in on that device; they stay until you sign out or delete your account. While a sign-in is in progress, one more short-lived cookie of the same kind protects it from being taken over. If you never sign in, you never receive them. The shop owner's private dashboard has its own sign-in cookie, which shoppers never receive. Stripe's checkout page runs on Stripe's own site and uses its own cookies, which Stripe describes in its privacy policy.

If you add the site to your home screen or your browser keeps an offline copy, your device stores copies of public pages and images so they load faster. Checkout, account, order and dashboard pages are never stored this way, and that copy stays on your device. You can clear it at any time in your browser settings.

We only send emails about something you did: your order confirmation, your shipping and tracking notice, and replies to your messages. There is no mailing list and we do not send marketing emails. If that ever changes, we will ask you first and every marketing email will have a one-click way to stop them.

Order records are not deleted automatically. We keep them as our record of each sale for tax, accounting and any question about the order later. If you sign in, your sign-in record is kept until you delete your account, which you can do yourself on the Account page. Contact messages stay in our email inbox until we delete them. Server logs are kept by our hosting provider for a limited period and then removed.

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy,
• correct something that is wrong,
• delete your information. We will delete what we can, but we may keep a record of a sale where the law requires it or to finish an order that is still in progress.

To make a request, contact us through the Contact page. To protect you, we may ask you to confirm the email address used on your order before we act. We will answer within the time the law where you live requires, and we will not treat you differently for asking. If we turn down a request, we will tell you why, and you can ask us to look at it again. Some states give residents further rights, such as appealing a decision or using an authorized agent; we will honor those where they apply.

The site runs over HTTPS. Card details are handled by Stripe and never touch our systems. The order database is reachable only from the site's own server, never directly from a browser, and the owner's dashboard needs a password. Signing in does not change that: your orders are looked up by the site's server and only after Apple or Google has confirmed your email. No system is perfectly secure, but we keep what we collect small and the access to it narrow.

This shop is not meant for children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information, contact us through the Contact page and we will delete it.

The date at the top shows when this policy last changed. If we make a change that matters, such as using your information in a new way, we will update this page before it takes effect. See also our Terms of Sale and Shipping & Returns.

Questions about this policy or your information: contact us through the Contact page.