Privacy policy.

When you buy from us or create an account, we collect: name, email, shipping/billing address, phone (optional), and payment info processed via our PCI-compliant payment provider. We never store full card numbers on our servers.

We use first-party analytics to understand traffic and improve the site (pages visited, device type, country). We use a small number of essential cookies for cart and login. You can disable non-essential cookies anytime via your browser.

If you opt in to our newsletter, we'll email you about new flavor drops, restocks, and the occasional letter. We use a third-party email platform (currently Klaviyo). You can unsubscribe with one click on any email.

We share data only with the third parties needed to run the business: payment processor (Stripe), shipping carriers (USPS, UPS, FedEx), email platform (Klaviyo), and analytics (Plausible). We do not sell personal data to anyone.

You can request access to, correction of, or deletion of your personal data anytime by emailing hi@morningcult.com. California residents have additional rights under the CCPA, including the right to know what we collect and the right to opt out of sale (we don't sell, but the right exists).

Morning Cult isn't directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe we have, email us and we'll delete it.

We retain order and account data for as long as your account is active or as needed to provide service and comply with tax and accounting law. Marketing data is deleted within 30 days of unsubscribe.

All site traffic is encrypted via HTTPS. Payment data is handled by Stripe (PCI DSS Level 1). Account passwords are hashed and salted. No system is perfectly secure — if we ever discover a breach, we'll notify affected users promptly.

We may update this policy. The "last updated" date at the top tells you when. Material changes will be announced via email and a site banner.

Privacy questions or requests: hi@morningcult.com. A real human reads and replies.