Legal
Privacy
How Merchant of Oz handles sign-in, Analytics, orders, and favorites.
Who we are
Merchant of Oz is an independent used-clothing shop in Northwest Arkansas. We do not publish a street address. This site is the door.
What we collect
If you sign in with Google, Firebase Auth stores your account email, display name, photo URL, and a user id. We use that to know who you are.
Favorites can sit in your browser and, when you are signed in, in Firestore under your user id.
Staff who place an invoice order give a bill-to and ship-to name, street, city, region, and postal code. Those fields live on the order record.
Staff notes in the hat inbox stay on that staff account.
The browser may keep a short session hint so the shop does not flash the Coming soon screen on an in-site click.
Google Analytics records page path, referrer, device, and approximate location. We do not send your email or user id to Analytics.
Who sees it
Google provides sign-in, hosts Firebase Auth and Firestore, and runs Google Analytics. We do not sell personal information.
We do not run an ad pixel or remarketing. Product photos and this policy are public.
How long we keep it
Account and favorite data last while the account is used. Order records last as long as we need them to fulfill or prove a sale. You can ask us to close an account by writing through the site.
Children
This shop is not directed at children under 13. We do not knowingly collect their data.
Changes
We will post updates on this page. Last updated 2026-09-20.