Privacy Policy
We respect your privacy and we are committed to being transparent to what we do with your data.
- We primarily use your information to process your order.
- You can request removal of your account and all associated data.
- We encrypt all your sensitive information in-transit and at-rest.
This Privacy Policy explains how MochiThings ("we", "us", "our") collects, uses, and discloses information about you when you visit or make a purchase from https://shop.mochithings.com (the "Site") or shop at our retail store. It also explains the choices and rights available to you.
Information We Collect
Information you provide to us
- Account information — name, email address, and password when you create an account. Registration is optional.
- Order information — name, shipping and billing address, email address, and phone number when you place an order, request a shipping quote, or start a return.
- Payment information — payments are processed by our payment partners (Braintree, PayPal, Google Pay, and Apple Pay). Your full card number is transmitted directly to the payment processor and is never received or stored by us. We receive only a payment confirmation and limited details (such as card type, last four digits, and the name on the payment method) needed to service your order. For purchases at our retail store, card payments are processed by Stripe; as with online payments, your card number is handled entirely by the payment terminal and processor and never touches our systems — we retain only the card type and last four digits.
- Communications — information you provide when you contact customer support, respond to a survey, or enter a contest.
- Newsletter — your email address if you choose to subscribe. We send marketing email only with your consent, and every message includes an unsubscribe link.
- Receipts — if you request an emailed receipt at our retail store, we use the email address you provide only to send that receipt; it is not saved to a customer profile or used for marketing.
Information collected automatically
- Device and usage information — IP address, browser type and version, and the pages, products, and searches you view on the Site.
- Cookies and similar technologies — including a first-party visitor identifier cookie, cookies set by our advertising and analytics partners, and advertising click identifiers (such as Google, Meta, Pinterest, and OpenAI click IDs) when you arrive from an ad. See "Cookies and Tracking Technologies" below and our Cookies Declaration for details.
- Approximate location — we derive your general region from your IP address, for example to show applicable privacy choices and estimate shipping.
Information from other sources
We receive order and delivery status from our shipping carriers (such as USPS, FedEx, and UPS), payment confirmations from our payment processors, and campaign measurement information from our advertising partners.
How We Use Your Information
- Process, fulfill, and ship your orders, and handle returns and exchanges
- Create and maintain your account and provide customer support
- Send transactional messages about your orders and account
- Send marketing email, only where you have opted in
- Measure and improve the Site, our products, and our marketing, including advertising measurement and personalization as described below
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
How We Disclose Your Information
Service providers
We share information with companies that perform services on our behalf under contract, including payment processing, shipping and delivery, cloud hosting, email delivery, customer support tooling, accounting, sales tax calculation, and error monitoring. These providers may use your information only to provide services to us.
We limit what each provider receives to what it needs. Our accounting provider, for example, records your orders using a reference number rather than your name, and receives only the city, state, and postal code of an order — not your street address — because that is all our tax and bookkeeping obligations require.
We use an artificial intelligence provider to help summarize and draft responses to customer support inquiries and order-related notices such as address confirmation emails; it receives the relevant conversation content or order address details under contract and may not use them for any other purpose.
Advertising and analytics partners
We use advertising and analytics services from Google (Google Analytics and Google Ads), Meta Platforms (Facebook/Instagram ads), Pinterest, and OpenAI (ads measurement). These partners collect information through cookies and similar technologies on the Site — such as pages viewed, products added to cart, and purchases — to measure ad performance and show you ads for our products on other sites and apps. For conversion measurement we may also send these partners limited information such as your email address and other contact details in hashed (pseudonymized) form, IP address, and browser information.
If you opt in to Google's customer review survey after checkout, we share your email address, order number, and delivery country with Google so it can send you the survey.
Depending on your state's law, this kind of disclosure for cross-context behavioral advertising may be considered a "sale" or "sharing" of personal information. You can opt out at any time — see "Your Privacy Choices and Rights" below.
Legal and business transfers
We may disclose information to comply with law or legal process, to protect the rights, safety, and property of our customers, the public, or MochiThings, or in connection with a merger, acquisition, or sale of assets.
We do not sell personal information for money.
Cookies and Tracking Technologies
We use first-party cookies to keep you signed in, remember your cart, and understand how the Site is used, and we allow the advertising partners named above to set cookies for advertising measurement and personalization. A full, regularly updated list of the cookies used on the Site is available on our Cookies Declaration page.
If you are visiting from the European Economic Area, the United Kingdom, or Switzerland, or if we cannot determine your location, a consent banner lets you accept or decline non-essential cookies before they are set, and you can change your choices at any time from the Cookies Declaration page.
This Site is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply to its use on our checkout and gift card pages.
Your Privacy Choices and Rights
Opt out of the sale or sharing of personal information
You can opt out of the disclosure of your information to advertising partners at any time on our Do Not Sell or Share My Personal Information page. We also honor the Global Privacy Control (GPC) signal: if your browser sends GPC, we treat it as a valid opt-out request automatically.
Marketing choices
You can unsubscribe from marketing email using the link in any message, on our newsletter unsubscribe page, or by contacting us. Unsubscribing deletes your address from our newsletter list. Transactional emails about your orders and account are not affected.
Your rights under U.S. state privacy laws
Comprehensive consumer privacy laws are in effect in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. The exact rights vary by state, but we extend the following to every U.S. resident regardless of where you live:
- Know and access — confirm whether we process personal information about you and obtain the categories and specific pieces we have collected, the sources, our purposes, and the third parties to whom we disclosed it.
- Portability — receive a copy of your personal information in a portable, machine-readable format. We provide this as a structured JSON file.
- Delete — request deletion of the personal information we hold about you.
- Correct — request correction of personal information that is inaccurate. Tell us what is wrong and what it should say, and we will correct it and confirm when it is done. You can also update your name and email address yourself from your account page.
- Opt out of targeted advertising and the sale or sharing of personal information — see the opt-out section above. We honor this for all visitors, not only residents of states that require it.
- Opt out of profiling that produces legal or similarly significant effects. We do not conduct that kind of profiling.
- Withdraw consent to processing of sensitive personal information. We do not collect sensitive personal information such as precise geolocation, government identifiers, health data, biometric data, or information about race, religion, sexual orientation, or immigration status.
- Non-discrimination — we will not deny you goods or services, charge you a different price, or provide a lesser quality of service because you exercised a privacy right.
How to submit a privacy request
Email support@mochithings.com with the request you want to make, or use the opt-out page for advertising opt-outs. Opting out of the sale or sharing of personal information does not require identity verification. For access, deletion, correction, and portability requests, we verify your identity by matching the information you provide against our records — typically your account email, and for guest orders, details of a recent order — because we will not disclose or delete personal information on an unverified request. You may designate an authorized agent to submit a request on your behalf; we may ask the agent for proof of your authorization and ask you to confirm it directly.
We respond to verified requests within 45 days. If we need more time, we will tell you why and extend by up to another 45 days, as permitted by law. There is no charge for a reasonable request.
Appealing our decision
If we decline a privacy request in whole or in part, we will explain why in writing, and you may appeal that decision. To appeal, reply to our response or email support@mochithings.com with the word "Appeal" in the subject line and tell us why you believe the decision was wrong. A person who was not involved in the original decision will review the appeal, and we will send you a written decision with our reasoning within 45 days (60 days where your state allows longer).
If we deny your appeal, you may submit a complaint to your state Attorney General. Contact information and complaint forms are available on your state Attorney General's website.
Additional rights for Minnesota residents
If you are a Minnesota resident, you may also request a list of the specific third parties — not just the categories — to which we have disclosed your personal information. We include this list in the data export we produce for access and portability requests. Minnesota residents also have the right to question the result of any profiling that produces a legal or similarly significant effect; as noted above, we do not conduct that kind of profiling.
California-specific disclosures
This Privacy Policy serves as our notice at collection for California residents: the categories of personal information we collect, the purposes for which we use them, and your right to opt out of sale or sharing are described in the sections above.
Your rights in the EEA, UK, and Switzerland
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data to perform our contract with you (orders and account), with your consent (marketing and non-essential cookies), and for our legitimate interests (site security and improvement). You have the right to access, correct, delete, restrict, or object to our processing of your personal data, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local supervisory authority. Our Site is operated from the United States, and your information will be transferred to and processed in the United States.
Data Retention
We keep personal information only for as long as needed to provide our services and fulfill the purposes described in this policy. How long depends on the category of information:
- Account information — while your account is active, then as needed to satisfy our legal obligations.
- Order, payment, and transaction records — retained as identifiable records for as long as your account remains open. When you close your account, or after seven years of account inactivity, we de-identify your order records — removing your name, address, and other contact details while retaining the transaction data (amounts, dates, and general location) needed for tax, accounting, and analytics purposes.
- Customer support communications — for as long as needed to resolve your request, plus a reasonable additional period for quality assurance and training. When we de-identify your account, your support tickets are deleted from our systems and erased from our support provider.
- Newsletter subscriptions — until you unsubscribe, at which point your address is deleted from the list.
- Device, usage, and log information — sign-in history, checkout activity, and browser and IP details are deleted when we de-identify your account, and otherwise retained only for a limited period to support security monitoring and Site improvement.
- Privacy request records — the date, nature, and outcome of each privacy request, kept for as long as the law requires us to demonstrate compliance.
You can request deletion of your account and personal information at any time — see "Your Privacy Choices and Rights" above. Deleting your account deactivates it immediately. We then de-identify it once no order has been placed for 90 days and no payment is still in flight, so that any active return, refund, or chargeback window can close first. We honor verified deletion requests except where retention is required by law or necessary to complete your transactions; where we cannot delete a record outright (for example, tax records or an order within its return window), we de-identify it or retain only what the exception requires. We retain a minimal record of your deletion request — the date, the nature of the request, and our response — as required by law, and we use it for no other purpose.
Security
We protect your information with technical and organizational safeguards: all traffic to the Site is encrypted in transit using TLS, sensitive personal information is encrypted at rest, payment card numbers are handled exclusively by our payment processors and never touch our servers, and access to personal information is limited to employees who need it to do their jobs.
Children's Privacy
The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.
External Links
The Site may contain links to other websites. We are not responsible for the content or privacy practices of other sites, and we encourage you to read their privacy policies.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post updates on this page and revise the date below.
Contact Us
MochiThings
1051 Andover Park E, Tukwila, WA 98188
Email: support@mochithings.com
Phone: 253-785-9815
Last Updated: August 14, 2026
1051 Andover Park E, Tukwila, WA 98188
Email: support@mochithings.com
Phone: 253-785-9815
Last Updated: August 14, 2026