Privacy Policy

Effective date: October 1, 2026

This policy explains what information Sasquatchee collects, why, and what choices you have. Sasquatchee is operated by ITPCPLUS in Medford, Oregon, USA. We keep it simple: we collect what we need to run the site, and we do not sell your personal information.

What we collect

Vendor registrations

When you register at /registration/, we collect your shop or business name, your name, email, Location, Vendor Type, Product Types, short bio, and, if you add them, your website, social link, logo and image. We also record the IP address the registration came from, to help stop spam and fraud.

Accounts

If you are approved, we store your login details (your password is stored in encrypted form), your dashboard settings, the products you add and your listing edits.

Order data

When shop checkout is available, we may collect order details such as items bought, shipping name and address, and contact details needed to fulfil the order. Payments are processed by Stripe. Card details go directly to Stripe and are not stored on sasquatchee.com servers. Stripe handles payment data under its own privacy policy: https://stripe.com/privacy. We receive only limited details from Stripe, such as your name, the last 4 digits of your card, and the payment status.

Messages

If you email us, we keep your message and address so we can reply.

Cookies and analytics

We use cookies and similar browser storage to keep you logged in and the site working, and to count visits. We do not use Google Analytics, the Meta (Facebook) pixel or advertising cookies. If we add another analytics or advertising tool, we will update this policy first. What we use:

• Login (WordPress): wordpress_logged_in_ and wordpress_sec_ cookies keep you signed in. They last until you close your browser, or about 14 days if you choose "Remember me". wordpress_test_cookie checks that cookies work and ends with your session.
• Cart and checkout (WooCommerce): woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_ remember your cart, for up to about 2 days.
• Order source (WooCommerce): sbjs_ cookies record how you reached the site (for example a search or a link) so we can see which pages lead to orders. They last for your visit, or up to about 6 months for the first-visit record.
• Visit statistics (Jetpack Stats and WooCommerce Analytics, by Automattic): these count page views and shop activity. They may set tk_ai (a random visitor ID, kept up to about a year) and tk_qs and tk_tc (session only). We see totals, not who you are.
• Saved lists and vendor picks (our own site): your saved list (sqsl_list_v1) and vendor pick choices (sqm_picks_target) are kept in your browser's local storage, not as cookies, until you clear them. They are not sent to us unless you are logged in and save your list to your account.
• Payments (Stripe): when you pay, Stripe may set its own cookies to process the payment and prevent fraud, under Stripe's privacy policy.

You can block or delete cookies and local storage in your browser settings at any time. Blocking login or cart cookies will stop sign-in and checkout from working, but blocking statistics cookies will not affect the site.

Why we use it

• To review registrations and run your vendor listing and dashboard.
• To show your public listing in the vendor directory and shop.
• To contact you about your account, review decisions and important changes.
• To keep the site safe, prevent fraud and handle reports.
• To understand how the site is used and improve it.
• To meet legal obligations.

Who sees it

Public: your shop name, Location, Vendor Type, Product Types, bio, links, logo, image and products, once approved. That is the point of a directory.

Event flyers and logos: event hosts can upload flyers and logos. Uploaded flyers and logos are shown publicly to site visitors as part of the event's listing page. Please do not put private information, such as a home address, personal phone number or personal email, on a flyer or logo you upload.

Private, admin only: your email address, your personal name if you do not show it publicly, your IP address, your password, and any declined registration. Only our site administrators can see these.

Sharing

Sasquatchee is run by ITPCPLUS (ITPC Plus), which also hosts and maintains the site. We do not sell your personal information or use it for anything other than running Sasquatchee as described in this policy. We share it with outside service providers only as needed to run the site:

• Stripe: payment processing, as described under Order data above and in Stripe's privacy policy.

Outside service providers process personal information only on our instructions and under contract, and do not use it for their own purposes, except that Stripe also handles payment data under its own privacy policy. We may also share information when the law requires it, or to protect people from harm or fraud. If the business is ever sold or merged, your information may transfer with it under this policy.

How long we keep it

We keep listing and account data while your account is active. Declined registrations are kept for 12 months and then deleted. After you close your account or ask us to delete your data, we delete or anonymize it within 30 days of your request, except what we must keep for legal, tax or safety reasons.

Your rights

Depending on where you live, including several US states and Canada, you may have the right to:

• Ask what personal information we hold about you and get a copy.
• Ask us to correct it.
• Ask us to delete it.
• Opt out of marketing emails at any time.
• Withdraw consent where we rely on it.
• Not be treated differently for using these rights.

In Canada, our handling follows the principles of PIPEDA: we collect only what we need, use it for the purposes we tell you, protect it, and let you see and correct it. You may also complain to the Office of the Privacy Commissioner of Canada. To use any of these rights, email us at the address below. We may need to confirm your identity first.

Security

We use reasonable safeguards such as encrypted connections (https) and limited admin access. No system is perfect, so we cannot promise absolute security.

Children

Sasquatchee is not meant for children under 13, and we do not knowingly collect their personal information. Vendors must be adults. If you think a child has given us information, contact us and we will delete it.

Changes

We will post any updates here with a new effective date, and tell vendors by email about important changes.

Contact

Privacy questions or requests: email Sasquatchee, or write to ITPCPLUS, 3073 Nettie Way, Medford, Oregon 97504, USA.

Do you want to know what a cryptid is? Check out this page.