Privacy Policy

We respect your privacy and we are committed to being transparent to what we do with your data.


  • We primarily use your information to process your order.
  • You can request removal of your account and all associated data.
  • We encrypt all your sensitive information in-transit and at-rest.
This Privacy Policy explains how MochiThings ("we", "us", "our") collects, uses, and discloses information about you when you visit or make a purchase from https://shop.mochithings.com (the "Site") or shop at our retail store. It also explains the choices and rights available to you.
 

Information We Collect

 
Information you provide to us
 
  • Account information — name, email address, and password when you create an account. Registration is optional.
  • Order information — name, shipping and billing address, email address, and phone number when you place an order, request a shipping quote, or start a return.
  • Payment information — payments are processed by our payment partners (Braintree, PayPal, Google Pay, and Apple Pay). Your full card number is transmitted directly to the payment processor and is never received or stored by us. We receive only a payment confirmation and limited details (such as card type, last four digits, and the name on the payment method) needed to service your order. For purchases at our retail store, card payments are processed by Stripe; as with online payments, your card number is handled entirely by the payment terminal and processor and never touches our systems — we retain only the card type and last four digits.
  • Communications — information you provide when you contact customer support, respond to a survey, or enter a contest.
  • Newsletter — your email address if you choose to subscribe. We send marketing email only with your consent, and every message includes an unsubscribe link.
  • Receipts — if you request an emailed receipt at our retail store, we use the email address you provide only to send that receipt; it is not saved to a customer profile or used for marketing.
 
Information collected automatically
 
  • Device and usage information — IP address, browser and device type, and the pages, products, and searches you view on the Site.
  • Visit information — the page you landed on, the site, ad, or campaign that referred you, and your browser, operating system, and device type.
  • Cookies and similar technologies — first-party cookies and cookies set by our advertising and analytics partners. See "Cookies and Tracking Technologies" below and our Cookies Declaration for details.
  • Approximate location — your general region, derived from your IP address, used to apply the right privacy choices and estimate shipping.
 
Information from other sources
 
We receive order and delivery status from our shipping carriers, payment confirmations and dispute notices from our payment processors, and campaign measurement information from our advertising partners.
 

How We Use Your Information

 
  • Process, fulfill, and ship your orders, and handle returns and exchanges
  • Create and maintain your account and provide customer support
  • Send transactional messages about your orders and account
  • Send marketing email, only where you have opted in
  • Measure and improve the Site, our products, and our marketing, including which channels and campaigns lead to purchases, and advertising measurement and personalization as described below
  • Detect and prevent fraud, abuse, and security incidents, including automated checks that may temporarily block a payment or hold an order for review
  • Comply with legal obligations
 

How We Disclose Your Information

 
Service providers
 
We share information with companies that perform services on our behalf under contract, including payment processing, shipping and delivery, cloud hosting, email delivery, customer support tooling, accounting, sales tax calculation, and error monitoring. These providers may use your information only to provide services to us.
 
We limit what each provider receives to what it needs.
 
Our providers include an artificial intelligence provider that helps us draft customer support responses and order notices; it may not use that information for any other purpose.
 
Advertising and analytics partners
 
We use advertising and analytics services from Google (Google Analytics and Google Ads), Meta Platforms(Facebook/Instagram ads), Pinterest, and OpenAI (ads measurement). Unless you opt out, or you are in a location where we ask for consent first (see "Cookies and Tracking Technologies" below), these partners' tags load in your browser when you visit the Site. As you browse, they send these partners information about your activity as it happens, such as the pages and products you view, items you add to your cart and purchases, together with cookie identifiers, your IP address and browser information. We use it to measure ad performance and show you ads for our products on other sites and apps.
 
We also send these events to Meta and OpenAI from our servers, together with the identifiers in those partners' own cookies on your browser, your IP address and browser information, and, if you are signed in or have made a purchase, your email address and other contact details in hashed (pseudonymized) form. After a purchase, unless you have opted out, we send the same hashed contact details to Google to match the purchase to its ads.
 
We do not share the words you type into the Site's search with these partners.
 
If you opt in to Google's customer review survey after checkout, we share your email address, order number, and delivery country with Google so it can send you the survey.
 
Depending on your state's law, this kind of disclosure for cross-context behavioral advertising may be considered a "sale" or "sharing" of personal information. You can opt out at any time — see "Your Privacy Choices and Rights" below.
 
Legal and business transfers
 
We may disclose information to comply with law or legal process, to protect the rights, safety, and property of our customers, the public, or MochiThings, or in connection with a merger, acquisition, or sale of assets.
 
We do not sell personal information for money.
 
Cookies and Tracking Technologies
 
We use first-party cookies to keep you signed in, remember your cart, and understand how the Site is used, and we allow the advertising partners named above to set cookies for advertising measurement and personalization. A full, regularly updated list of the cookies used on the Site is available on our Cookies Declaration page.
 
In most of the United States these cookies and tags are active by default, and you can turn them off at any time (see "Your Privacy Choices and Rights" below).
 
If you are visiting from the European Economic Area, the United Kingdom, Switzerland or certain U.S. states, or if we cannot determine your location, a consent banner lets you accept or decline non-essential cookies before they are set, and you can change your choices at any time from the Cookies Declaration page.
 
Our store and careers pages embed Google Maps and Instagram content under those companies' privacy policies. They load only where advertising cookies are allowed; otherwise we show a link instead.
 
Site visit measurement
 
We run our own visit measurement. Where advertising cookies are allowed, it sets a visit cookie and a visitor cookie (lifetimes are listed on the Cookies Declaration). If you have opted out and are in a region where we do not ask for consent first, we record visits without cookies in pseudonymous form for our own measurement. These records are never shared with advertising partners.
 
This Site is protected by reCAPTCHA on our checkout, gift card, support, and job application forms, and Google's Privacy Policy and Terms of Service apply.
 

Your Privacy Choices and Rights

 
Opt out of the sale or sharing of personal information
 
You can opt out of the disclosure of your information to advertising partners at any time on our Do Not Sell or Share My Personal Information page. We also honor the Global Privacy Control (GPC) signal: if your browser sends GPC, we treat it as a valid opt-out request automatically.
 
When you opt out, we do not load advertising or analytics tags or embedded maps and videos, and we do not send your activity or purchases to advertising partners from our servers. Your choice applies to this browser. If you opt out while signed in, it is also saved to your account. If your browser sends the Global Privacy Control signal, we save that as an opt-out in the same way.
 
We also clear the advertising cookies our Site can access. First-party visit measurement continues without cookies, as described above.
 
Marketing choices
 
You can unsubscribe from marketing email using the link in any message, on our newsletter unsubscribe page, or by contacting us. Unsubscribing deletes your address from our newsletter list. Transactional emails about your orders and account are not affected.
 
Your rights under U.S. state privacy laws
 
Many U.S. states have comprehensive consumer privacy laws. The exact rights vary by state, but we extend the following to every U.S. resident regardless of where you live:
 
  • Know and access — confirm whether we process personal information about you and obtain the categories and specific pieces we have collected, the sources, our purposes, and the specific third parties to whom we disclosed it.
  • Portability — receive a copy of your personal information in a portable, machine-readable format.
  • Delete — request deletion of the personal information we hold about you.
  • Correct — request correction of inaccurate personal information. You can also update your name and email address from your account page.
  • Opt out of targeted advertising and the sale or sharing of personal information — see the opt-out section above. We honor this for all visitors, not only residents of states that require it.
  • Opt out of profiling that produces legal or similarly significant effects. We do not make decisions about you with such effects by automated means; fraud holds are reviewed by our team.
  • Withdraw consent to processing of sensitive personal information. We do not collect sensitive personal information such as precise geolocation, government identifiers, health data, biometric data, or information about race, religion, sexual orientation, or immigration status.
  • Non-discrimination — we will not deny you goods or services, charge you a different price, or provide a lesser quality of service because you exercised a privacy right.
 

How to submit a privacy request

 
Email support@mochithings.com with the request you want to make, or use the opt-out page for advertising opt-outs. Opting out of the sale or sharing of personal information does not require identity verification. For access, deletion, correction, and portability requests, we verify your identity by matching the information you provide against our records — typically your account email, and for guest orders, details of a recent order — because we will not disclose or delete personal information on an unverified request. You may designate an authorized agent to submit a request on your behalf; we may ask the agent for proof of your authorization and ask you to confirm it directly.
 
We respond to verified requests within 45 days. If we need more time, we will tell you why and extend by up to another 45 days, as permitted by law. There is no charge for a reasonable request.
 
Appealing our decision
 
If we decline a request in whole or in part, we will explain why in writing, and you may appeal by replying to our response or emailing support@mochithings.com. We will send a written decision within 45 days (60 days where your state allows longer).
 
If we deny your appeal, you may submit a complaint to your state Attorney General. Contact information and complaint forms are available on your state Attorney General's website.
 
California-specific disclosures
 
This Privacy Policy serves as our notice at collection for California residents: the categories of personal information we collect, the purposes for which we use them, and your right to opt out of sale or sharing are described in the sections above.
 
Your rights in the EEA, UK, and Switzerland
 
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data to perform our contract with you (orders and account), with your consent (marketing and non-essential cookies), and for our legitimate interests (site security and improvement). You have the right to access, correct, delete, restrict, or object to our processing of your personal data, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local supervisory authority. Our Site is operated from the United States, and your information will be transferred to and processed in the United States.
 
Data Retention
 
We keep personal information only for as long as needed to provide our services and fulfill the purposes described in this policy. How long depends on the category of information:
 
  • Account information — while your account is active, then as needed to satisfy our legal obligations.
  • Order, payment, and transaction records — retained as identifiable records for as long as your account remains open. When you close your account, or after seven years of account inactivity, we de-identify your order records — removing your name, address, and other contact details while retaining the transaction data (amounts, dates, and general location) needed for tax, accounting, and analytics purposes.
  • Customer support communications — for as long as needed to resolve your request, plus a reasonable additional period for quality assurance and training. When we de-identify your account, your support tickets are deleted from our systems and erased from our support provider.
  • Newsletter subscriptions — until you unsubscribe, at which point your address is deleted from the list.
  • Device, usage, and log information — sign-in history, checkout activity, and browser and IP details are deleted when we de-identify your account, and otherwise retained only for a limited period to support security monitoring, fraud prevention, and Site improvement.
  • Site visit records — deleted 90 days after the visit, or sooner when we de-identify your account. The channel credited for each order is kept with the order record.
  • Privacy request records — the date, nature, and outcome of each privacy request, kept for as long as the law requires us to demonstrate compliance.
 
You can request deletion of your account and personal information at any time — see "Your Privacy Choices and Rights" above. Deleting your account deactivates it immediately. We de-identify it after a short waiting period so any open return, refund, or dispute can close first. We honor verified deletion requests except where retention is required by law or necessary to complete your transactions; where we cannot delete a record outright (for example, tax records or an order within its return window), we de-identify it or retain only what the exception requires. We retain a minimal record of your deletion request — the date, the nature of the request, and our response — as required by law, and we use it for no other purpose.
 
Job applicants
 
When you apply for a job or email our careers address, we collect your name, contact details, résumé and attachments, and your messages, and use them to evaluate your application and communicate with you. Our application form uses reCAPTCHA. We may keep the email addresses of senders we identify as spam to block future messages. Applicant records are kept for one year after your last activity with us and then become eligible for deletion. The rights described above apply to applicant data.
 
Security
 
We protect your information with technical and organizational safeguards: all traffic to the Site is encrypted in transit using TLS, sensitive personal information is encrypted at rest, payment card numbers are handled exclusively by our payment processors and never touch our servers, and access to personal information is limited to employees who need it to do their jobs.
 
Children's Privacy
 
The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it. We do not knowingly sell or share the personal information of consumers under 16.
 
External Links
 
The Site may contain links to other websites. We are not responsible for the content or privacy practices of other sites, and we encourage you to read their privacy policies.
 
Changes to This Policy
 
We may update this Privacy Policy from time to time. We will post updates on this page and revise the date below.
 
Contact Us
 
MochiThings
1051 Andover Park E, Tukwila, WA 98188
Email: support@mochithings.com
Phone: 253-785-9815
 
Last Updated: October 6, 2026