Privacy Policy

When you place an order we collect your name, email, phone number, billing address, and the items you ordered. When you pay, the payment page (hosted by Authorize.Net) collects your card details directly — those details do not pass through our servers.

• Authorize.Net (payment processor) — to charge your card and verify the transaction. They are PCI DSS compliant.
• Supabase (hosting / database) — stores your order record.
• Resend (email delivery) — sends your order confirmation and any follow-up email.
• Law enforcement — only if required by a lawful subpoena or court order.

We do not sell your personal information. We do not share it with marketers.

This site uses a small number of cookies for cart persistence and basic analytics. We do not use third party advertising cookies. You can block cookies in your browser, but the cart will stop working.

We never see or store your full card number, CVV, or expiration date. Authorize.Net handles the entire card entry flow on their own hosted page. We receive only a transaction ID and the last four digits.

Order records (name, email, phone, items, amount) are retained for 7 years for tax and compliance purposes. You can request deletion earlier by contacting us, and we will delete anything not required by law to retain.

Data in transit is protected by HTTPS. Data at rest is stored in Supabase with row-level access controls. Payments are PCI DSS compliant via Authorize.Net.

You may request a copy of the data we hold about you, correction of anything inaccurate, or deletion (subject to legal retention requirements). Contact us at the number or address below.

This site is not intended for anyone under 18. If we learn that we have collected information from someone under 18, we will delete it promptly.

We may update this policy. Material changes will be noted via the "Last updated" date above.

Willy's Works Fireworks, 1508 N Main St, Crown Point, IN 46307. (219) 662 9675.