What this covers
This Privacy Policy explains how Leafline ("we," "us," or "our"), a brand of SteepOS, collects, uses, and shares information when you visit steepos.polsia.app, take the Leafline quiz, join a waitlist, or subscribe to a monthly tea collection.
By using Leafline you agree to the practices described below. If anything here is unclear, write to hello@leafline.tea and we'll explain in plain language.
What we collect
We collect three kinds of information. First, things you give us directly: your name and email when you join a waitlist, sign up for launch notifications, or submit a quiz result; and your shipping address and payment method when you place a subscription order.
Second, things your browser gives us automatically: IP address, device type, browser version, the pages you viewed, where you came from (referrer), and rough geographic region. We use these to understand traffic and improve the funnel.
Third, things our payment processor gives us: Stripe tokens that confirm a subscription started, renewed, or was cancelled. We do not see or store your full card number.
How we use it
We use the information you give us to deliver the service we promised: to ship your monthly collection, to send order and shipping emails, to match your subscription to the ritual quiz results, and to respond when you email us.
We use automatic browser data to measure which pages work, which teas people add or skip, and where in the funnel visitors drop off. This is internal — we never sell it.
We use Stripe tokens to confirm payments, prevent fraud, and reconcile renewals. If you cancel, we keep the cancellation record so we don't try to bill your card again.
Cookies & analytics
Leafline uses a single first-party cookie that stores an anonymous visitor identifier so we can tie together the pages of one session for analytics purposes. The cookie expires after one year and contains no personal information.
We do not deploy third-party tracking scripts such as Google Analytics or Facebook Pixel. The analytics data collected lives in our own database and is used only by the Leafline team.
You can block or delete the cookie from your browser at any time. Doing so will not affect your ability to use the site — you simply won't appear in our internal funnel stats.
Stripe & payment data
All payment processing is handled by Stripe. When you subscribe, your card details are entered on Stripe's hosted checkout page and never reach our servers. We retain only the last four digits, card brand, and Stripe customer identifier, which we need to manage renewals and refunds.
Stripe's handling of card data is governed by Stripe's own privacy policy and PCI-DSS compliance program, available at stripe.com/privacy.
Email marketing
If you join a waitlist or quiz notify list, we add you to a transactional and launch email list. You will receive an opt-in or welcome message when you sign up, occasional updates as Leafline approaches launch, and a launch announcement.
Every email we send includes an unsubscribe link. Unsubscribing stops marketing emails immediately; it does not stop transactional emails tied to an active subscription (renewal receipts, shipping notices, support replies).
Data retention
We keep subscription records (name, email, shipping address, Stripe customer ID, shipment history) for as long as your account is active and for up to three years after cancellation for tax and accounting compliance.
Quiz responses, waitlist emails, and launch signups are kept indefinitely unless you ask us to delete them. Analytics events are retained for 24 months and then aggregated or deleted.
Your rights & how to contact us
You can request a copy of the personal data we hold about you, ask us to correct or delete it, or withdraw consent for marketing emails at any time. Email hello@leafline.tea and we'll respond within 14 business days.
If you are a California resident, you have additional rights under the CCPA, including the right to know what categories of personal information we have shared with third parties in the past twelve months. Our answer: none.
For European residents, Leafline is the data controller for the information described in this policy. Our legal basis for processing is contract performance (for active subscriptions) and legitimate interest (for analytics and marketing).
Changes to this policy
If we make material changes — anything that affects what we collect or how we use it — we'll post the updated policy here with a new effective date and notify active subscribers by email at least 30 days in advance.
Effective date
This policy is effective as of 2026-07-20.