Merchandise Privacy Policy

Last Updated: October 30, 2026

This policy explains how Fourthwall, Inc. (“Fourthwall,” “we,” “us”) handles your information when you browse or buy from a creator’s shop powered by Fourthwall, hold a membership, make a donation, or receive a gift. It also covers designs you preview and orders you place directly with us, for example at orders.fourthwall.com. If you are located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland, “personal information” means any information relating to an identified or identifiable individual.

In short

• We’re the seller. We sell the products and memberships and process donations, so we’re responsible for your information when you buy.
• We use it to take payment, deliver your order, run your membership, help you, prevent fraud and meet legal duties.
• We share it with the creator and the partners who make and deliver your order.
• We never store your full card number. Our payment providers handle it.
• We don’t sell your information for money. Our ad and analytics tools may count as a “sale” or “sharing” under some US laws, and you can opt out.
• You can ask to see, correct or delete your information at privacy@fourthwall.com.

The creator’s role

The creator (or brand) runs the shop and uses the order and customer details we share under its own privacy policy, linked at the bottom of the shop. That policy also covers the creator’s mailing lists, giveaways and messages, and any tools, pixels or apps it adds.

When we host the shop and its content (including membership posts and comments), report shop visits to the creator, or deliver its messages to you, we act for the creator (as its “processor”) under the shop’s privacy policy.

Our main Privacy Policy covers everything else.

What we collect

From you

• Order details: your name, email, shipping and billing address, phone number (if you give it), what you buy, and a gift recipient’s name and address.
• Payment details, which you enter with our payment providers, such as Stripe and PayPal.
• Account details, if you have an account: your login details, membership details and billing history.
• Reviews you write about a product, including any photos.
• Messages you send us, including through a shop’s contact form or support email, and return or withdrawal requests (with any photos).

Automatically: your IP address, device and browser details, approximate location (from your IP address), pages you view, what you do at checkout, cookie IDs, and your downloads of digital products.

From others: payment and fraud-prevention providers (such as whether a payment went through), delivery partners (delivery status) and anyone who sends you a gift (your name and address). For direct orders, the app where you started gives us only the design and order details you submit, including designs you just preview, and related technical information. We get no access to your account there.

You need to give us the required checkout details to place an order (your phone number is optional). Some are also needed for tax law. Without them, we can’t complete your order.

How we use it, and why

Emails. We email you about your orders, membership and requests, and may track whether you open them.

Fraud checks. We and our payment providers use automated tools to help spot fraud, using signals such as your device, IP address and transaction details. If fraud is suspected, a payment may be declined or the order cancelled. If you think we got it wrong, contact us and we’ll look into it.

Who we share it with

• The creator whose shop you use: your order and customer details (such as your name, contact and shipping details, and what you bought) and messages meant for it, including through tools it connects, like email, analytics, ad or shipping tools.
• Partners who make and deliver your order: manufacturers, fulfillment partners and carriers.
• Payment providers, which handle payments under their own privacy policies.
• Service providers for hosting and content delivery (which receive technical information, such as your IP address, when they deliver pages and media), email delivery, customer support and AI tools (including the assistant creators use to manage their orders), analytics, fraud prevention and security, and tax and accounting.
• Advertising and analytics partners, such as Google, through the ad and analytics tools on shops and checkout. They can receive what you view and buy, order totals, and contact details such as your email address or phone number (some of them hashed).
• YouTube, for shops that sell on YouTube: order details, without your contact details, so it can report sales.
• Our affiliates.
• Others when needed: to comply with the law or protect rights and safety, in a merger or sale of our business, or with your consent.

Cookies and analytics

We use cookies on shops and at checkout to run your cart, checkout and account securely, understand how they’re used, and show and measure ads for the creator’s products (for direct orders, for our own services). We use analytics services such as Google Analytics, and our analytics and advertising partners may collect information about your online activities over time and across different services. Learn about Google’s practices at https://www.google.com/policies/privacy/partners/ or opt out with the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.

Where the law requires, such as in the EU and UK, we ask for your consent first, and you can change your choices in our cookie settings. We don’t respond to “Do Not Track” signals, but we do honor Global Privacy Control (see “US privacy notice”).

How long we keep it

We keep your information only as long as we need it for the reasons above, then delete it or make it anonymous. For example:

• Orders and payments: until your order, returns and any disputes are done, then as long as tax and accounting laws require.
• Accounts and memberships: while your account is open, then only what we still need for the reasons above.
• Support messages, browsing and device data: as long as needed to help you, keep our services secure, prevent fraud and improve them. Cookies expire after set periods.
• Direct-order designs: used only to preview and make your orders (and later orders, if you save them), and never made public. Unless you save it, we delete a design within 30 days after delivery (including any replacement), or within 30 days if you only previewed it or the order was declined, cancelled or refunded before delivery. Saved designs stay until you ask us to delete them or close your account. We keep designs longer only if the law requires it.

We may keep other information longer where the law requires it or to handle a legal claim.

International transfers

We’re based in the US and process your information there. Some partners are elsewhere, such as where your order is made or shipped from (including the EU and China), and the creator may be anywhere. For transfers from the EEA, UK or Switzerland to countries without an adequacy decision, we use safeguards such as the European Commission’s Standard Contractual Clauses (with the UK Addendum or Swiss adjustments where needed) or rely on a legal exception, such as when the transfer is needed to complete your order. Email privacy@fourthwall.com for a copy.

Your rights

Depending on where you live, you can:

• know what information we collect, its sources and uses, and who we share it with, and get a copy (including in a portable format);
• correct or delete it;
• restrict how we use it;
• object to how we use it based on our legitimate interests, and to direct marketing at any time;
• opt out of its “sale,” “sharing” or use for targeted advertising (see below);
• in some US states, ask which third parties received it;
• withdraw your consent at any time, without affecting earlier use; and
• complain to a data protection authority, for example where you live or work.

We won’t treat you differently for using your rights. To make a request, email privacy@fourthwall.com or write to us at the address below. We’ll verify requests (except opt-outs) by matching details you give us, like your email and order number. You can authorize someone to make a request for you with your signed permission; unless they have a power of attorney, we may ask you to confirm your identity. If we deny your request, you can appeal by replying to our decision. Requests about the creator’s own use of your information go to the creator.

US privacy notice

Notice at collection. We collect the categories below to process and deliver your orders and memberships, help you, prevent fraud, meet legal duties, improve our checkout and shops, and show and measure ads for the creator’s products (for direct orders, for our own services). We keep each only as long as those purposes and our legal duties require (see “How long we keep it”). In the past 12 months, we collected and disclosed them as shown:

We may also disclose any category to our affiliates, to authorities and advisers where the law requires, or in a merger or sale of our business. We use account logins only to sign you in and protect your account, so there’s no right to limit their use.

Sale and sharing. We don’t sell personal information for money. But in the past 12 months, the ad and analytics tools on our shops and checkout disclosed identifiers (including contact details, some of them hashed), commercial information (such as what was bought and order totals) and internet activity to advertising partners to show and measure ads for the creator’s products (for direct orders, for our own services), which some state laws may treat as a “sale” or “sharing.” You can opt out through our cookie settings, where available, or by contacting us. We also treat a Global Privacy Control (GPC) signal from your browser as an opt-out for that browser and, if we know who you are, for you, and we process it in a frictionless manner (learn more at https://globalprivacycontrol.org).

We don’t knowingly sell or share the personal information of anyone under 16. California residents can also ask us about information we’ve shared with third parties, including creators, for their own direct marketing.

Children

Our shops aren’t directed to children under 13, and we don’t knowingly collect their personal information. If you think a child under 13 has given us information, tell us at privacy@fourthwall.com.

Security

We protect your information with safeguards like encryption and access controls, but no system is completely secure.

Changes

We’ll post changes here and update the date above. Before we use your information for a new purpose, or significantly change how we use or share it, we’ll tell you and ask for consent where the law requires.

Contact us

Email privacy@fourthwall.com or write to:

Fourthwall, Inc.
2041 East St. Suite 1090
Concord, CA 94520
United States

For help with an order, use the shop’s contact form or support email (for direct orders, support@fourthwall.com).

EU and UK representatives

You can also contact our representatives about data protection:

• EU: European Data Protection Office (EDPO), using EDPO’s online request form at https://edpo.com/gdpr-data-request/ or by writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium.
• UK: EDPO UK Ltd, including for complaints under section 164A of the Data Protection Act 2018, using EDPO’s online request and complaint form at https://edpo.com/uk-gdpr-data-request/ or by writing to EDPO UK at Unit 33, Waterside, Schooner Court, 44-48 Wharf Road, London, N1 7UX, United Kingdom.