Privacy & cookies

PostHog analytics

With analytics permission, PostHog receives explicit public-page and shopping events. A random browser identifier is stored for the current tab session. We do not identify you by customer account or build person profiles, and automatic interaction capture, recordings, surveys and automatic error collection are disabled. IP-based geolocation enrichment is disabled; PostHog still receives network information needed to serve requests. This project processes events in the United States.

Shopping and essential storage

The Keychain Shop uses Shopify to provide products, maintain your shopping bag and process checkout. Checkout information you choose to provide is used for your order, payment and fulfilment. Essential shopping-bag storage lasts up to 30 days. We store privacy choices on this browser for up to 180 days; blocked browser storage means your choice may not persist.

Optional analytics and advertising

Optional tools are blocked until you give permission. Analytics measures public product-page visits and shopping actions. Advertising tools measure campaigns and can help ad platforms show relevant ads. Providers may receive your IP address, browser/device information, page and product interactions and use cookies or similar identifiers. Some processing and storage may occur outside Australia.

Our shopping-event payloads do not include your name, email, phone number, address, payment details, search text, customer ID or checkout URL. Do not put personal information in campaign links. No fingerprinting or advanced customer matching is implemented in this storefront.

Tools enabled on this storefront

• PostHog — analytics

We do not load optional tracking on private pages or URLs containing unrecognized query parameters. Provider storage and retention also depend on the settings and policies of each enabled service.

Provider information: PostHog, Google, Meta, TikTok, Microsoft, Plausible, Shopify.

Session replay is separate

If configured and you explicitly enable it, Microsoft Clarity records interactions for heatmaps and usability review. Storefront text is masked. Replay is not included in the “Accept analytics & ads” choice. No payment or checkout fields are recorded by this storefront.

Control or withdraw permission

You can reject optional tracking without losing access to shopping. Use the button below or the footer to change your choices. Withdrawal stops future tracking and reloads the page to unload provider scripts; it cannot recall information already sent. Previously set provider cookies may remain until expiry or until you clear them using your browser controls.

Global Privacy Control blocks advertising and replay. We also honor Do Not Track by blocking all optional tools. These signals take precedence over an earlier choice.

Shopify checkout is a separate surface

Checkout is hosted by Shopify. This storefront does not count a checkout click as a completed purchase. Where checkout uses a different root domain, your browser cannot automatically share this storefront's stored choices. Review the consent options shown on Shopify checkout. Its own privacy settings and connected apps govern tracking there.

Contact and privacy requests

For questions about personal information, requests for access or correction, deletion requests or privacy complaints, contact [email protected]. Rights and any retention obligations depend on the laws applicable to your request. Please do not send payment details or passwords by email.