Privacy
This shop is run by a creator on Kubal. Products on it are sold by the sellers named on each product page, who take your order, your payment and your delivery on their own websites.
What Kubal holds
When you buy something, the seller tells us the order happened: the items, the amounts, the payment method and the delivery status. They do not send us your name, your email address, your phone number or your delivery address, and we have no way to ask for them.
If you fill in the help form on this shop, we hold the email address and any phone number you type there, along with what you wrote and the order number you gave. That is passed to the seller so they can reply. Your email address and phone number are deleted 180 days after your request is closed; what you wrote and the order number are kept as the record of the request.
Your bag and your wishlist are kept in your own browser. When you open either one, the list of items on it is sent to this shop to be priced and shown to you, and it is not stored. When you check out, the items for that seller are sent once more and recorded as a checkout, with no detail about you.
Each checkout also gives your browser a random code, which it keeps with the items you sent. That code is how Your orders finds the order the checkout became, and how your bag knows to let go of what you bought. We store only a fingerprint of it beside the checkout, which cannot be turned back into the code and says nothing about who you are. Anyone using this browser can see the orders it made, and clearing your browsing data removes the codes and the list with them.
If you create an account
An account is yours to choose, and you can buy without one. If you create one, our sign-in service, Supabase, holds your email address and, if you sign in with Google, the name and picture Google shares with it. A password you choose goes straight to the sign-in service, which keeps only a scrambled form of it; this shop never stores it. The emails that confirm your address and reset your password come from that service.
Your account is tied to the checkouts you make while signed in, and to those this browser made before, which it offers when you sign in. That is how your orders follow you to another device. Sellers and creators never see who you are: they see the order, as they always did, and nothing that names you. A sign-in cookie on this shop keeps you signed in for up to 30 days.
You can delete your account from the account page at any time. Your sign-in details are deleted then; the orders you placed stay with the sellers who took them, tied to nobody.
What Kubal does not hold
We do not hold payment details of any kind. We never see your card, your UPI ID or your bank account, because checkout happens on the seller's own site and money never passes through us.
We do not use advertising or analytics cookies, and there are no third-party trackers on this shop.
Where it is held
On servers in Mumbai, India. Raw messages from a seller's shop are kept for seven days so a problem can be fixed and replayed, then deleted.
Asking us about your data
Write to the grievance officer named on the product you bought. They hold your order. If your question is about something Kubal holds, write to privacy@kubal.com and we will answer within 30 days.