Your information.

What you share

XINGO uses your email to verify and sign you in with a code. A verified email can create an account without a password. Password sign-in is optional and is handled by Supabase Auth; the storefront does not save your password in its application tables or browser storage.

The bag saved to your account, saved pieces and address book are linked to your account. A guest bag stays on this device unless you explicitly merge it. An address can include your name, address and optional phone number. Do not add an address unless you want it saved for future shopping.

How we use it

We use this information to provide sign-in, protected product details and your saved selections. When secure checkout is enabled and you start payment, we snapshot your selection and chosen delivery address into an order and reserve stock. PayPal receives the order amount, product names and shipping address to process payment. Card information is entered in PayPal-hosted fields; XINGO does not store card numbers or security codes. Order and payment-result records remain associated with your account even if you later delete a saved address. Delivery information may be shared with the carrier to fulfill a paid order.

Supabase provides authentication and customer-data storage. Resend sends account verification emails. Order emails can be sent after the order-email service is configured; payment updates are also saved in your account. The hosting and service providers may process technical connection and operational logs when delivering these services.

Order support requests

When you submit an order support request, XINGO stores its type, messages, status and timestamps with your order. You can view your own request and the store’s public replies after signing in. The authorised store operator can review these requests and keep internal notes that are not shown to customers. Requests and their history remain associated with the order; this feature does not provide deletion of that history.

General enquiries and reply emails

For a general enquiry, we store your email, topic, optional product, messages, language, status and timestamps. Store operators can keep private notes and an operation history. A hashed network identifier helps limit repeated submissions. Open your private email link to confirm your address and enable reply notifications. Anyone with this link can view and reply to that enquiry; keep it private. The link expires after 90 days.

Resend delivers enquiry confirmations and reply notifications. Emails contain a link, not the conversation or private store notes. Order-support reply notifications direct you to your verified account. Messages and operation records are retained for support; this feature does not delete that history. This tab stores your enquiry access key and any unconfirmed message for safe retries. On a shared device, close the tab after use. Do not send passwords, sign-in codes or card details.

Browser storage

Account bag changes use a request marker in this tab’s session storage. It contains only the account ID, request UUID, product ID, change type and quantity delta; it contains no email, address, price or sign-in token. An uncertain change is checked against its server receipt before success is shown. If no receipt is available, you can explicitly retry the same request; the server applies it at most once. Further bag changes, checkout and device-bag merging remain blocked while a request is unconfirmed. The marker remains after sign-out or expiry. A different account can view its own bag but cannot overwrite the unfinished request; sign in to the original account to check it. If safe storage is unavailable, the saved bag remains readable but cannot be changed in this tab.

Device favourites are saved in this browser for up to 30 days and contain only public product IDs and timestamps, at most six designs. They remain separate from account favourites. Use Saved designs → Clear device favourites to remove them, especially on a shared device; signing out does not clear them. If storage is unavailable, they last only on the current page. Importing them into your account requires your explicit choice. Only confirmed imports are removed from the device list.

Before changing account favourites, this tab stores a retry marker with your account ID, product ID and intended saved or removed state in session storage. It contains no sign-in token, email or product price. An uncertain change is checked and retried with the same intended state. The marker can remain after signing out until the same verified account confirms it; a different verified account discards the previous marker. If this marker cannot be safely stored, account favourites remain readable but cannot be changed in this tab.

Recently viewed designs and comparison choices are saved on this device for up to 30 days. They contain only public product IDs and timestamps, with at most six recently viewed designs and three comparison choices. They are not linked to your account. Use Clear recently viewed or Clear comparison to remove them; signing out does not clear these device choices. If storage is unavailable, they last only on the current page.

Address changes in your account and checkout use retry markers in this tab’s session storage. A marker contains the account ID, address UUID, operation and a SHA-256 fingerprint, without names, phone numbers, street addresses or sign-in tokens. The actual address stays in your account. An uncertain result is checked against saved server records before reporting success. Further changes are blocked until it is confirmed. Markers remain after sign-out or session expiry. A different account can read its own addresses but cannot overwrite an unfinished save from the earlier account; sign in to that account to check it. If safe storage is unavailable, addresses remain readable but new changes are unavailable in this tab.

An order support submission awaiting confirmation is kept in this tab’s session storage with your account ID, order ID, message and request identifier, so an interrupted submission can use the same request without adding it twice. It is cleared when the submission is confirmed, you sign out or a different account is verified. It is not stored in the guest bag or local storage. If this tab cannot save it, online support submissions are unavailable; use the support email instead.

The current tab keeps sign-in tokens in session storage so you can stay signed in and refresh your session. Signing out clears this stored session and visible account data. It does not copy your account bag into local storage or delete an unmerged guest bag.

A guest bag in local storage contains public product IDs and quantities. If an import is pending, it also contains a random request identifier, the account identifier used for that import and a record of the selected IDs and quantities so retries do not add the same pieces twice. It does not contain your email, prices, addresses or sign-in tokens.

A guest bag remains on this device until you remove its pieces or complete a confirmed merge into your account. Signing out does not delete it. On a shared device, remove guest pieces manually before leaving. Account bags are kept separately and are not copied into the guest bag.

If a device bag has a pending import, sign in to the same account to finish it before editing. An interrupted import can be retried without adding the same quantities again.

If site storage is unavailable, a guest bag is kept only on the current page and may be lost when you reload or leave. Enable secure site storage in a current browser before merging.

We measure page views, referral campaigns, device category, display language and shopping steps using a random tab session that renews after 30 minutes of inactivity. We do not link analytics to your account or store names, emails, addresses, full URLs or raw IP addresses. A daily salted network hash limits abuse. Event records are kept for 90 days. We respect Do Not Track and Global Privacy Control. Advertising pixels and marketing email campaigns are not enabled.

Managing saved information

Use Account → Addresses to edit or delete an address. Remove pieces from your bag or saved pieces whenever you want. Changing your password is available in Account → Password. Removing an address or selection does not delete the whole account.

Self-service account deletion is not currently available. Email liuht7@gmail.com for privacy or account-deletion requests. Removing a saved address or selection does not remove order and payment records.

Questions

See the current contact information. Contact customer care at liuht7@gmail.com for questions about your information.