Privacy Policy

    Last updated: July 12, 2026

    This Privacy Policy explains how Ultraterrestrial Enterprises LLC ("we," "us") handles information in connection with phrangang.com and the Phra Ngang Codex.

    1. Information we collect

    • Email address — only if you subscribe to updates. It is stored in our database (Supabase, via Lovable Cloud) and added to our mailing list (Substack).
    • Order and shipping details — if you order a flag: your name, delivery address, contact email, and order contents, used to produce and ship your piece.
    • Basic technical and usage data — standard server/security logs via our infrastructure provider (Cloudflare).

    We do not ask for sensitive personal information, and we collect a name and mailing address only when they are needed to ship an order.

    2. How we use information

    To fulfil and ship your order and handle any related support, to send updates you opted into, to maintain security, and to understand basic site usage.

    3. Payments and marketplaces

    Purchases are handled by third-party payment processors under their own policies. We do not receive or store your payment-card details.

    4. Service providers

    We rely on third-party processors, each with its own privacy policy: Supabase / Lovable Cloud (database + hosting), Substack (mailing list), Cloudflare (infrastructure), our payment processor, our print-and-ship production partner (which receives the name and address needed to deliver your flag), and GlobalGiving (donations).

    5. We do not sell your data

    We do not sell or rent your personal information.

    6. Cookies

    We use only essential cookies needed for the site to function, plus any privacy-respecting analytics noted at the time. You can control cookies through your browser settings.

    7. Email choices

    You can unsubscribe from emails at any time using the link in any message.

    8. Data retention and security

    We keep information only as long as needed for the purposes above and apply reasonable safeguards. No method of transmission or storage is perfectly secure.

    9. Children

    The site is not directed to children under 18, and we do not knowingly collect their data.

    10. Your choices

    To ask what we hold or to request deletion of information we control (such as your email subscription), contact phrangangster@gmail.com. Note that a flag's public authenticity record contains no personal information and cannot be deleted by us.

    11. Changes

    We may update this policy; material changes will be posted here with a new "last updated" date.