What we collect,
and what we don’t.

The short version

Four things, and the rest of this page is the detail behind them.

• No payment is ever taken on this website. There is no checkout, no card field and no payment processor, so there is no card number, bank detail or billing address for us to hold, lose or leak.
• There is no analytics, no advertising and no tracking pixel on this site. Not a lighter kind. None. That is unusual enough in 2026 to be worth saying plainly.
• We do not sell your details and we do not hand them to anyone for advertising.
• Everything we hold, we hold to make you a board and talk to you about it. Your name, a way to reach you, what you ordered and when you need it.

Who we are

Trovato’s is a family charcuterie business in Scottsdale, Arizona, making Calabrian boards to order in a home kitchen under Arizona’s Cottage Food Program. This website is trovatosaz.com. We are the people who decide what happens to the details you send through it.

Anything on this page — a question, a copy of what we hold, a deletion — goes to contact@trovatosaz.com, and a person reads it.

What we collect, and why

When you send an order request

Your name

So we know who we are replying to, and whose board it is. Required.

Your email address

This is how we reply, confirm the board and confirm the price. Required.

Your phone number

Optional. Only if you would rather we texted you about the handover.

The board

Which of the boards you chose, or — if you designed one — the list of items you placed, their weights, the cured-meat-and-cheese ratio and the estimate the builder worked out.

The date you need it, the occasion, and how many people

So we can size the board, source the meats in time, and schedule the day.

Pickup or delivery

If you choose delivery, the form asks for a five-digit ZIP code and nothing more. The exact street address is agreed in the reply, between the two of us, and is stored on the order once it is agreed, because someone has to drive to it.

Anything you write in the notes box

Allergies, a region you would like the board to visit, how it is getting to the table. It is a free text box, so what is in it is what you chose to put there.

When you send a custom board or event enquiry

The same contact details, plus the date you have in mind, how many people, and the brief you write. If you started a board in the builder, you can attach it.

When you make an account — “Your Passport”

An account is optional. You can order a board without one. If you make one, it holds:

• Your email address, which is your sign-in.
• A name and a phone number, if you put them in your profile. Both are optional and both are yours to edit or empty at any time.
• Your Passport — which Calabrian regions you have been stamped for, the date of each stamp, and the order it came from.
• Boards you save — the item list, and the picture of the board the builder draws, which is kept in a private store only you and we can open.
• Your order history — the requests you have sent and where each one got to.
• A marketing-email checkbox. It is off unless you switch it on.

When you write a review

The name you choose to publish, a rating out of five, your review, and optionally a headline and what the occasion was. The email box on that form is optional and is labelled “never shown”, because it never is — see Reviews.

When you use the board builder

Nothing. The builder runs entirely in your browser. The board you are designing is kept in your own browser’s storage and reaches us only at the moment you send a request or save it to your account.

What we never collect

• Payment details. Nothing on this site takes money. Every figure it shows you is an estimate until we confirm it, and you pay us in person.
• Your location. The site never asks your browser for it. A delivery ZIP code is something you type, not something we read off your device.
• A profile of you. There is no behavioural tracking here and nothing that follows you to another website. No cross-site identifier is set, read or sold, because none exists.
• Anything sensitive. No date of birth, no government ID, no health information beyond what you may choose to tell us about an allergy so we can keep you safe.

Cookies, and what is kept in your browser

This site sets no cookies. There is no cookie banner because there is nothing to consent to.

It does use your browser’s local storage, which is a different thing: it stays on your device and, unlike a cookie, is never attached to a request and sent to a server. This is everything that can end up in it:

trovato.board.v1

The board you are designing, so a refresh or a closed tab does not lose your work.

trovato.pendingBoard.v1 and trovato.orderBoard.v1

A board being carried from the builder to your account, or from your account to the order form. Each is deleted the moment it has been handed over.

trovato.auth.provider.v1

Which sign-in button you used last time, so we can point at the same one. It is a hint; nothing is pre-selected and nothing is hidden because of it.

Your sign-in session

If you have an account, the token that keeps you signed in is kept here by Supabase’s sign-in library. Signing out removes it.

Clearing site data for trovatosaz.com in your browser removes all of it, and the site carries on working — you would lose an unsent board and have to sign in again.

Signing in with Google

Google is the only social sign-in switched on today. Apple, Facebook and Microsoft are built and waiting, and if we ever turn one on this section will name it and the same limits will apply.

We ask Google for nothing beyond who you are. The sign-in requests no additional permissions at all — no Gmail, no Drive, no Contacts, no Calendar, no Photos. What comes back is your email address and, if your Google account has one set, the name on it. That is the whole of it.

We use it for exactly one thing: to know which account is yours when you come back. The email address is stored in your profile, the same as if you had signed up with an email link.

What Google does on its own side of that exchange is covered by Google’s privacy policy, not by this one. You can revoke our access at any time from your Google account’s third-party access settings, and you can avoid Google entirely by signing in with an email link or a password instead.

Reviews

Every review is held for moderation. Nothing you write appears on the site until a person has read it and approved it, which usually takes a day.

What is published: the name you chose to publish, your rating, your words, the occasion if you wrote one, and our reply if we write one.

What is never published: your email address. This is not a matter of the page choosing not to show it. The database does not grant the website permission to read that column at all, for anyone signed in or not, so there is no version of the public reviews page that could print it — not by accident, not by a bug, and not by someone querying the site’s API directly. The same is true of the internal moderation notes.

A review attached to an order on your account is marked as a verified purchase. The database works that out from the order record itself; neither you nor we can set that mark by hand.

If a photograph is ever attached to a review, it goes into a private store with no public address. Once the review is approved, the page fetches the photo through a signed link that stops working after an hour. A photo attached to a review that is never approved is never reachable by anyone but us. (The review form on the site does not offer a photo field today; this covers anything sent to us another way.)

Ask us and we will take your review down.

Who else touches your data

We are a household, not a data centre. Four companies do the parts of this we could not do ourselves. Here they are, and what each one sees.

Supabase

The database, the sign-in system, the file storage and the small server functions that receive the three forms. Your order requests, your account, your Passport and your reviews physically live here.

Resend

Sends the email. Two kinds pass through it: the notification to us that you have sent something, which contains what you sent; and the sign-in emails to you — a magic link, a password reset, an invitation if you are staff.

Google

In two unrelated ways. If you choose “Sign in with Google”, as described above. And on every page of this site, including this one, because the two typefaces it is set in — Playfair Display and Karla — are served from fonts.googleapis.com and fonts.gstatic.com. Loading a font is a request to Google, and Google sees your IP address as a result. Nothing else about you is sent, and no cookie comes back.

Hostinger

Hosts the files that are this website. Like every web host it keeps server logs of the requests it serves.

And, if we ever connect one, a CRM or another business tool. The site is built so that your contact details and your order details can be pushed to an outside system through a signed webhook or an API key. That is a switch we control, and any system we switch on gets named here. Nothing is connected today. If we connect one, we will name it here before it receives anything.

Not on this list, on purpose: no delivery app, no marketplace, no payment processor, no shipping carrier, no advertising network, no analytics company, no email marketing platform, no customer-chat widget. Boards are never shipped and never handed to a courier.

IP addresses

The three forms are rate-limited, so one machine cannot flood us with junk. That needs some way to tell one sender from another, and this is exactly what it does:

• To count. Your IP address goes into a counter key in a table of rate limits — “this address, this hour, this many”. Those rows are deleted after a day.
• On the record itself. The saved order request does not store your IP address. It stores a salted SHA-256 hash of it, cut to sixteen characters. It is enough to see that two abusive submissions came from the same place; it cannot be turned back into an address. The same is true of an event enquiry. A submitted review stores no IP address in any form.

Separately, and unavoidably: our host, Supabase and Google’s font servers each see your IP address while they are answering a request, because that is how the internet delivers a reply.

How long we keep it

We keep an order request and the details attached to it for 120 days after the date it was for, then delete it. The exception is an account: if you have signed up, your account, your Passport and your order history are kept for as long as you keep the account, and go when you ask us to close it. What that means in practice:

• Order requests and the account records attached to them are kept for as long as the business needs them — to honour a booking, answer a question about a past order, and keep the books straight.
• Ask us to delete your account and we delete it, along with your profile, your Passport stamps and the boards you saved.
• Rate-limit rows are deleted after a day. That is the one period the software enforces by itself.

Your choices

• See it. Email us and we will send you what we hold about you.
• Correct it. Your name, your phone number and your marketing preference are yours to edit in Your Passport → Profile. Anything else, tell us and we will fix it.
• Delete it. There is a Request deletion button in Your Passport → Profile, or email contact@trovatosaz.com.
• Marketing email is off unless you switch it on, and switching it back off is one checkbox.
• Take your review down. Just ask.

There is no “do not sell my information” link on this site because there is nothing to opt out of: we do not sell personal information and we do not share it for cross-context behavioural advertising. Whatever privacy rights you have where you live, the practical answer here is the same one — ask us, and we will show you, correct it or delete it.

Children

This site is for people buying charcuterie, and it is not directed at children. We do not knowingly collect anything from anyone under 13. If you believe a child has sent us details through this site, email us and we will delete them.

Changes to this policy

This page changes when the website changes — if we switch on another sign-in provider, connect an outside system, or start doing something this page does not describe, this page is updated first. The date at the top is the date it last changed.

Contact us

contact@trovatosaz.com. Tell us what you want to know, correct or delete, and a person will answer.