Policies
Privacy Policy
Last updated October 4, 2026. This page explains what the We Dig Skulls website collects when you read a story, send us a message or open the shop, why it is collected, who else handles it, and how you can opt out or ask us to delete something. Orders are handled by Fourthwall, so order and payment details are covered by its policy, linked below.
The short version
- If you write to us, we receive the name, email address, topic and message you type into the contact form.
- The site keeps your theme choice and your cookie choice in your browser's local storage. Those stay on your device.
- Google Analytics 4 and Microsoft Clarity load only after you press Accept, and never when your browser sends a Global Privacy Control signal.
- Fourthwall takes your order, payment and shipping details under its own privacy policy.
- We do not sell your information and we do not run targeted advertising.
- You can ask to see, correct or delete what we hold through the contact form.
Information you give us
Our contact form runs on Netlify Forms. It asks for your name, your email address, a topic and your message, and it includes a hidden field that real visitors leave empty, which helps filter out automated spam. Netlify handles the submission for us as the service that runs the form.
We use your name and email address to read your message and reply to you, and we use the topic to see what you are asking about. Please do not put payment-card numbers or other sensitive details in the message box. Order questions are best sent to Fourthwall, since it holds the order.
Information collected automatically
Netlify hosts this site, so it keeps ordinary server logs of visits as part of running the service.
Analytics are different, because they are optional. When you choose Accept in the cookie banner, we load two tools. Google Analytics 4 measures traffic. Google's documentation lists the default data as the number of users, session statistics, approximate location, and browser and device information, and it uses a first-party cookie called `_ga` to tell users and sessions apart. Microsoft Clarity records behavior on the page, including clicks, scrolls, mouse movement and heatmaps, and it can play a visit back as a session replay. We use both to see which stories people read and where pages are hard to use.
Nothing from either tool loads before you accept, and nothing loads at all if your browser sends a Global Privacy Control signal. The Cookie Policy lists each cookie by name. For how the vendors handle the data, see Google's page on how Google uses information from sites or apps that use its services and the Microsoft Privacy Statement. Microsoft's Clarity terms say Microsoft may collect or receive personal data from visitors to provide Microsoft Advertising, and Microsoft's FAQ says Clarity does not sell data and does not currently respond to Do Not Track signals. If you would rather not have Google Analytics see your visits at all, Google offers an opt-out browser add-on.
Orders
The shop is run by Fourthwall, the merchant of record. It collects and processes your name, shipping address, payment details and order information, and it makes and ships each item to order. Its Privacy Policy, last updated October 1, 2025, says payment information may go to payment providers such as Stripe and PayPal, including a card number and billing address. We Dig Skulls does not keep your full payment-card details.
For order, shipping and payment questions, use the support route Fourthwall shows in the store and at checkout. Its Terms of Service explain the rules for purchases.
How we use information
We use what you send through the form to answer you. We use analytics, when you have accepted them, to measure traffic, improve how the site works and diagnose errors. We use the hidden form field to filter spam and keep the site secure. We do not use your information to build advertising profiles.
Sharing
We do not sell your personal information, and we do not use it for targeted advertising. It reaches a few outside services that run parts of the site: Netlify for hosting and the contact form, Google and Microsoft for analytics you have accepted, and Fourthwall for orders. We may also share information when the law requires it or to protect the site and its visitors from fraud and abuse.
Retention
We keep contact messages for as long as we need them to answer you and handle any follow-up. We may keep information longer where it is required for legal, security, fraud-prevention, accounting or transaction purposes. Analytics data is held by Google and Microsoft, and the Cookie Policy gives the cookie lifetimes and retention periods those vendors publish. Fourthwall keeps order records under its own policy.
Your choices and rights
You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Send the request through the contact form, and say what you want done. We may ask you to confirm the request is yours, and we will not ask for more identification than we need. We may keep some information where the legal, security and accounting reasons above apply.
To stop analytics, decline the banner, use the "Cookie settings" link in the footer, or install Google's opt-out add-on. A few state laws give residents extra rights, such as the right to know, delete, correct and opt out of the sale or sharing of personal information. Those laws apply only to businesses above certain sizes, so they may or may not reach a small site like this one. We will handle your request through the form either way.
Tap or hover a row to highlight it.
| State law | Applies to a business that |
|---|---|
| State lawCalifornia (CCPA) | Applies to a business thatEarns at least $26.625 million a year, or handles the personal information of at least 100,000 California residents or households, or earns at least 50% of its revenue from selling or sharing that information |
| State lawVirginia | Applies to a business thatHandles the data of at least 100,000 consumers in a year, or at least 25,000 consumers while earning over 50% of revenue from selling personal data |
| State lawColorado | Applies to a business thatHandles the data of at least 100,000 consumers in a year, or sells personal data for revenue or a discount and handles the data of at least 25,000 consumers |
| State lawTexas | Applies to a business thatDoes business in Texas, processes or sells personal data, and is not a small business as the U.S. Small Business Administration defines it |
| State lawMontana | Applies to a business thatHandles the data of at least 50,000 consumers, or at least 25,000 consumers while earning over 25% of revenue from selling personal data |
Details are in the California Privacy Protection Agency, the Virginia Consumer Data Protection Act, the Colorado Attorney General, Texas Business and Commerce Code Chapter 541 and the Montana Session Laws. Other states, including Connecticut, Delaware, Oregon and Utah, have their own laws with their own thresholds, and several have changed recently, so check your state's attorney general if you want the current rule.
Global Privacy Control
Global Privacy Control, or GPC, is a signal that a browser or browser extension sends to say you want to opt out of the sale or sharing of your personal information. The California Attorney General treats it as a valid opt-out request, and Colorado and Connecticut also recognize universal opt-out signals. You can learn how to turn it on at globalprivacycontrol.org.
On this site, when your browser sends a GPC signal, Google Analytics 4 and Microsoft Clarity do not load. The signal applies to the browser or device that sends it. You can also contact us directly through the contact form.
Children
This is a general-audience site and is not directed to children under 13. The contact form should not be used by children under 13, and we do not knowingly collect personal information from them. If we learn that a child under 13 has sent us information, we will delete it. A parent or guardian who believes this has happened can tell us through the contact form. The FTC's COPPA guidance explains the rules for general-audience sites.
Changes to this policy
When we change this policy, we will update the "Last updated" date at the top of the page. If the change is material, we will say so here. The Terms of Use and Cookie Policy are updated the same way.
Contact
Questions, access requests, corrections and deletion requests all go through the contact form. You can also visit the home page or read about the site on the About page.