Your information
Privacy
This site has one job: getting your store to Debi's catalogs. It keeps your sign-in, the catalogs you open, the messages you send and anonymous counts of how the site is used, and as little else as it can.
No ads, no selling
Nothing is sold or shared, and there are no ads or tracking from other companies.
One cookie
One cookie, set when you sign in, keeps you signed in on that device for up to a year. Signing out removes it. There are no other cookies.
Who sees it
Debi and Kodyak. Website help and Help & feedback messages go to Kodyak, who runs the website. Emails go out through Resend, and the site runs on Cloudflare; neither uses your information for anything else.
Questions or changes
To see what's recorded about you, correct it or have it removed, send Debi a message.
See the details
What's recorded, and for how long
| What | Why | Kept for |
|---|---|---|
| Your customer record | Your name, email, phone and store, as Debi imports or approves them, so you can sign in and Debi knows who you are. | While you're one of Debi's customers. Records of admin changes that mention your email are kept 2 years. |
| Sign-ins | When you sign in with a link, and a rough name for the device, like “Safari on iPhone” (never your internet address). Each link keeps working for a year on up to 3 devices, so this is how the site counts them, and how Debi knows the site is being used. | 30 days after the link stops working |
| Catalog opens | Which catalogs you open and when, so Debi can follow up on the lines you're interested in. | 2 years |
| Promotions | Which of the month's promotions you looked at and which flyers you opened (counted once a day), so Debi knows what interests you. | 2 years |
| Promotion emails | Whether you're getting Debi's monthly promotion emails, and each time that changed and how (for example, the email's unsubscribe link). | While you're one of Debi's customers |
| Emails we send you | That a sign-in link or invite was sent to you, and whether it arrived. | 1 year |
| Requests for catalog access | What you fill in on the request form (or that your email tried to sign in), so Debi can approve it. | 1 year after Debi answers it |
| Help & feedback messages | What you send, any screenshot you add, and the page, device and browser it came from, so the website team can fix things. | 1 year after it's marked done |
| Questions from the Contact page | Emailed to Debi (or the website team); not stored on the site. | Not stored |
| Counts of requests and messages | How many catalog requests, messages and “Show phone & email” presses there are, which page of this site each came from, and the answer to “How did you hear about Debi?”. Only a count: never your name, email, internet address or a cookie. | About 3 months |
| Who got each promotions email | That a monthly promotions email went to you, the sign-in link in it, and its own unsubscribe link, so Debi can see who signed in from it and so that link keeps working. | 1 year |
| Changes by Debi and Kodyak | Who changed a customer, catalog or line, and when. | 2 years |
| Problems and security checks | Errors on the site and blocked or failed attempts. These can include your customer number and the page or form involved, but never passwords, sign-in links or message text. | 90 days |
| IP addresses | Your internet address, and the email typed into a form, to limit spam and repeated tries (for example, 3 sign-in links an hour). | 2 days |
| Cloudflare's own logs | Cloudflare runs the site and keeps short logs of each visit, including your IP address and the page address. For a sign-in link, that address includes the link. | About 3 days |
A daily cleanup deletes things once their time is up.
Spam checks
The sign-in and Contact forms and “Show phone & email” use Cloudflare Turnstile to tell people from bots. It doesn't use cookies for advertising.
Internet addresses and Cloudflare's logs
Your internet address is kept for 2 days, only to limit spam and repeated tries. Cloudflare's own logs of each visit last about 3 days and include the page address, which for a sign-in link includes the link.