Privacy and email security

Updated October 11, 2026. Wintergarten uses contact information to handle orders, enquiries, email subscriptions, and requested updates. Newsletter marketing requires a confirmed subscription and includes an unsubscribe option. A verified order contact does not automatically become a newsletter subscriber.

Email verification

When an email address is first supplied, Wintergarten may send a single-use verification message. The underlying request is held until the recipient confirms control of the mailbox. Recipients can report an unwanted request instead. We retain a minimal suppression record so we do not repeatedly contact an address that reported abuse.

Security records

To investigate spam and protect the store, we record event time, request category, the form and referral source when available, an anonymous interaction identifier, coarse browser family, and cryptographic fingerprints of the email mailbox and network address. These fingerprints help link repeated activity without storing the original network address in our signup security log. We also retain email addresses in pending contact challenges and customer records.

Routine security events are scheduled for deletion after 90 days, and reported security events after 365 days. Expired unreported verification challenges are scheduled for deletion after 30 days. The minimal mailbox suppression identifier may remain while needed to respect an abuse report. Customer orders and financial records may have longer business or legal retention obligations.

Site analytics and providers

Wintergarten uses Umami analytics for anonymous page and event measurement. Umami does not require advertising cookies. Submitted email addresses are kept out of analytics events. We use hosting, database, and mail delivery providers to operate the service, including Vercel, DigitalOcean, and Resend. Security logging is limited to protection and investigation.

Your choices

You can ignore a verification request, confirm it, or report that someone else entered your email address. You can unsubscribe from marketing in any newsletter. For a request about your contact records or a privacy question, reply to a Wintergarten email with your request. We may verify mailbox ownership before releasing account information.