Privacy Policy
Last updated: 13 October 2026
How Grid handles personal information
This policy describes the personal information Grid processes to run digital stores, accounts, and orders. It covers the marketing site and the store pages.
Account
When you sign in, we receive your email address from Amazon Cognito. You also give us your first and last name, and a middle name if you choose to add one. We use this to create your profile and to tell orders and stores apart.
Carts and orders
If you shop, we store the cart and the order needed to complete the purchase. If you run a store, we store the catalogue, store details, and orders for that store.
Session and device storage
Sign-in is a server-side session identified by a cookie. We do not put Cognito tokens in your browser. Cart id, theme, and language are kept in local storage. A return path, last-viewed store, and pending order are kept in session storage. Details are in the cookies policy.
Payments
Checkout is handled by the payment provider. The provider receives the payment details needed to charge the order. We store the order and the payment status.
Service messages
We use your email address to send messages about your account or an order, such as an order receipt.
Why we use this information
- To run the store, your account, and your orders
- To keep the session secure and to limit abuse
- To send service messages you need in order to use Grid
Who else processes it
We do not sell personal information. These providers process it only to run Grid:
- Amazon Cognito, for sign-in
- Amazon Web Services, for hosting, file storage, and email
- The payment provider, when you check out
We also disclose information when the law requires it, or to protect the service and its users.
How long we keep it
The sign-in session ends when you log out or it expires. Account, store, and order records are kept while the account is in use and for as long as we need them for the service and for legal obligations.
Security
The site is served over HTTPS. The sign-in session stays on the server. Access to production systems is limited to the people who operate the service.
Your choices
You can ask us to access, correct, or delete the account information we hold. You can also stop using the service and log out, which clears the session.
Children
Grid is not directed at children under 13, and we do not knowingly collect their personal information.
Changes
If this policy changes in a material way, we will update this page and the date below.