Not a privacy policy until the client pastes one.
What this install stores today
- Account email and WooCommerce orders.
- Family profile names, optional birth dates, face photos, and consent flags for laser assignment.
- Laser project files and operator notes.
- Star, contest, and loyalty ledgers (none of them are checkout money).
- Contact-form tickets and desk-chat threads.
- Gallery uploads only go public after rights + moderator approve.
Essential cookies run the cart. Optional analytics wait for a real CMP. We will not invent GDPR/CCPA clauses, retention years, or a DPO name.