Privacy Policy

Last updated: August 19, 2026

Keyboard Spa is a mail-in cleaning and restoration service for standalone mechanical, custom, Topre, gaming, enthusiast, and vintage keyboards. This policy explains what we collect, why, and what you can do about it.

We keep this simple on purpose: we collect what we need to clean your keyboard and get it back to you, and nothing more.

Information we collect

When you submit your keyboard for service, we collect:

• Contact details — your email address (we derive a display name from it).
• Keyboard details — the model and any condition notes you choose to share.
• Shipping address — so we can issue a prepaid label and return your keyboard to you.
• Order records — your order ID and its status as it moves through our workshop.

Payments

Payments are processed by Stripe. Your full card details are entered on Stripe's secure checkout and are handled by Stripe — we never see or store your card number.

How we use your information

• Review your paid booking and confirm that the keyboard is within our cleaning scope.
• Process payment and fulfill your order.
• Send transactional email — checkout reminders, payment receipts, refund notices when applicable, your prepaid shipping label, and status updates as your keyboard moves through the workshop.
• Respond to your questions.

Transactional email is sent through Resend, our email provider. We do not send marketing email, and we do not sell your data.

Cookies & tracking

We do not use advertising cookies, and we do not sell your data to advertisers. Your order-status page is reached through an unguessable link rather than a login, so there is no login cookie behind it.

We do use PostHog to understand how the site is working. PostHog sets a first-party cookie and records page views, clicks, errors, and a video-like replay of the pages you visit. Replays let us find broken layouts and confusing steps in the order form.

Everything you type into a form is masked in these replays. Your name, email, and notes are blanked out before the recording leaves your browser, so we never receive them that way. The admin pages are not recorded at all. Replays are deleted after 30 days.

To opt out, turn on Do Not Track in your browser, or use a tracker blocker. We honor Do Not Track and record nothing when it is set. The order flow works the same either way.

Who we share it with

We share information only with the service providers needed to run the service — Stripe (payment), Resend (email), PostHog (site analytics and error tracking), and the shipping carrier that moves your keyboard. We do not sell or rent your personal information.

Data retention & security

We retain order records as long as needed to provide the service and meet legal and accounting obligations, then delete them. We apply reasonable measures to protect your information from unauthorized access.

Your rights

• Request access to the information we hold about you.
• Request correction of anything inaccurate.
• Request deletion of your information.
• Opt out of any non-essential communication.

Contact

Questions, or want your information deleted? Email [email protected].