Privacy Policy

R Commerce is a portfolio storefront built by Rick to demonstrate e-commerce development. It runs a real account system and a Shopify checkout in test mode, so it handles a small amount of personal data. This page explains what is collected, why, and how to have it removed.

The site is operated from Markham, Ontario, Canada. Rick is the person responsible for the personal information it handles and the contact for any privacy question or request: info@rickshowcase.com.

• Newsletter

  The email address you enter in the footer form. It is sent to info@rickshowcase.com through Resend and is not stored in a database or added to an automated mailing list.

• Account

  Your email address, a hashed password that cannot be read, an optional display name, your saved items and your cart. Stored with Supabase and used only to run your account.

• Checkout

  Handled by Shopify in test mode, under Shopify's own privacy policy. Shopify receives your cart and whatever you enter at checkout. A pseudonymous account id and analytics ids are attached to the order so it shows in your account and is counted once in analytics. No payment is charged and nothing is shipped.

• Concierge

  The messages you type, the page you are on and a random session id are sent to the site's chat backend and to the AI service that writes the reply. Conversations are logged to improve the assistant, so please keep personal details out of them.

• Analytics

  Google Analytics 4, loaded through Google Tag Manager, records pages viewed, product clicks, cart and checkout steps, device type and an approximate location derived from your IP address, which Google does not store. Logged-in visitors are identified by a random account id, never by email.

• Server logs

  The host, Vercel, keeps standard request logs (IP address, browser) for security.

• Account

  Until you delete it

• Newsletter email

  Until removal is requested

• Test orders

  Until removal is requested

• Concierge conversations

  One month

• Analytics

  Up to 14 months

• Server logs

  A few days

Cookies set by this site:

• rc_consent

  180 days

  Your cookie choice.

• rc_consent_mode

  30 days

  Whether your region requires opt-in consent.

• sb-…-auth-token

  Until you log out

  Keeps you logged in to your account.

• _ga, _ga_…

  Up to 2 years

  Google Analytics visitor and session ids. Set only with your consent, or until you decline in regions where consent is implied.

The site also keeps a few values in your browser's session storage: whether the intro has played, the current Concierge conversation and a checkout in progress. They are cleared when you close the tab.

In the EU, the UK, Switzerland and Quebec, analytics stays off until you accept. Everywhere else it runs until you decline. Either way you can change your mind at any time through Cookie settings in the footer; declining removes the Google Analytics cookies and stops further analytics hits.

To see, correct or delete the data tied to your account, email info@rickshowcase.com from the address on the account. Deletion is completed within 30 days. Residents of Quebec, the EU and the UK also have the right to withdraw consent, to receive a copy of their data, and to complain to their privacy regulator.

For visitors in the EU and the UK, analytics relies on your consent, your account on the agreement to provide it, and server logs on a legitimate interest in keeping the site secure.

Vercel (hosting), Supabase (accounts and database), Shopify (checkout), Google (analytics), Resend (email delivery) and the AI service behind the Concierge process data on the site's behalf. Some of them store data outside Canada, mainly in the United States.

When this policy changes, the date at the top is updated.