Privacy Policy
Last updated: August 18, 2026
Who We Are
This site is operated by VARO Industries, doing business as The New Janky Workshop, 679 Washington St., Unit #8-118, South Attleboro, MA 02703, United States. Questions about this policy or your data can go to tnjw@duck.com.
What We Collect
We only collect what we need to run the shop:
- Order information — your name, email address, shipping address, billing address, and the items you bought.
- Payment information — card details are entered directly into Stripe and are never sent to or stored on our servers. We receive only the last four digits, card brand, and whether the charge succeeded.
- Email address — when you request a free download or subscribe to updates.
- Contact form submissions — the name, email address, and message you send us.
- Account information — if you create an account, your email address and a securely hashed password.
- Technical data — your IP address, which we use to rate-limit the free-download form and to protect the site from abuse.
What We Do Not Do
We do not run third-party analytics, advertising pixels, or tracking cookies on this site. We do not sell, rent, or trade your personal information to anyone, for any reason.
Cookies
We use only the cookies required for the site to function: a cart identifier so your basket survives a page reload, a session token if you are signed in, and a region preference. There are no advertising or analytics cookies, so there is nothing here to opt out of.
How We Use Your Information
- To process, fulfill, and deliver your orders.
- To send transactional email — order confirmations, shipping notices, and download links for digital products.
- To send occasional shop and channel updates, if you asked for them. Every one of those emails has an unsubscribe link.
- To answer messages you send us.
- To prevent fraud and abuse, and to meet our legal and tax obligations.
Who We Share It With
We share data only with the service providers that make the shop work, and only with what they need:
- Stripe — payment processing. See the Stripe privacy policy.
- Kit — email list management for free downloads and shop updates. See the Kit privacy policy.
- Printful — our print-on-demand partner. When you order a printed item such as a t-shirt or hoodie, we send Printful your name, shipping address, and the items ordered so they can print and ship it. They never receive your payment details. See the Printful privacy policy.
- Shipping carriers — your name and address, so your package arrives.
- Our email and hosting providers — to deliver transactional mail and to run this site.
We may also disclose information where required by law, or to protect our rights, property, or safety.
Content Loaded From Other Sites
Video thumbnails on our homepage are served by YouTube's image host. Loading them tells YouTube your IP address and browser details. We do not embed the YouTube player itself, so no YouTube cookies are set unless you click through to watch.
How Long We Keep It
Order records are kept for as long as we need them for tax and accounting purposes — generally seven years. Email subscribers are kept until you unsubscribe. Contact form messages are kept until the conversation is resolved and then deleted. Account data is kept until you ask us to delete the account.
Your Rights
Wherever you live, you can email us at tnjw@duck.com to access a copy of the personal information we hold about you, correct it if it is wrong, or ask us to delete it. If you are in the EU/UK or a US state with a privacy law such as California, those requests are your legal right and we will honor them; we will not charge you or treat you differently for exercising them. We aim to respond within 30 days.
You can unsubscribe from marketing email at any time using the link at the bottom of any such email.
Security
The site is served over HTTPS, passwords are stored hashed, and card data never touches our servers. No system is perfect, but we keep the amount of data we hold deliberately small.
Children
This shop is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.
Changes
If we change this policy we will update the date at the top of this page. Material changes affecting how we use your data will be announced to email subscribers.