Privacy
Last updated 4 October 2026
This shop is built to know as little as possible, and it cannot leak what it never has.
What we do not collect
You do not create an account to buy. The shop has no analytics, no trackers, no ad pixels, and it sets no cookies for buyers. We do not log your IP address. The fitting room (which items you tried on) lives only in your own browser's local storage and never leaves it.
Where you pay
The sale happens on the artist's own Ko-fi shop, so your card details go to Ko-fi and its payment provider. The Hollow Shop never sees them and has no way to ask for them. What Ko-fi holds about you is covered by Ko-fi's own privacy policy.
What Ko-fi tells us about an order
When an order is paid, Ko-fi posts it to the shop. That message carries your email address, the name you gave Ko-fi, what you paid, and which items were bought.
Your email address is used once, to send you the code, and is then gone. The name is not used at all. The one exception is a send that fails: the message is then sealed with a key on the server and held so it can be tried again, and the sealed copy is deleted the moment the mail goes out.
What stays in the database from an order:
- the order's message id from Ko-fi, so the same order cannot be counted twice
- Ko-fi's own reference number for the transaction
- when it happened, what it was worth, and which item codes were in it
- the SHA-256 of each code we minted, which is what lets a code be redeemed once
- a sale count on the listing
Your email address and your name are not in that list, and neither is the code itself. A code exists in plain text only in the message we send you.
Redemption
When a code is redeemed in the Hollow app, the shop verifies it and burns it. The shop does not learn which Hollow identity redeemed it, and it does not record where the redemption came from. The supporter credential is built so the shop cannot link it to a purchase.
Artists
Artists who sign in by email have that address stored encrypted. It is used only to send login codes and mail about their own listings, and it is never shown or sent anywhere else. A Ko-fi verification token is never stored in plain text either: the shop keeps a keyed hash of it and compares against that.