Skip to content

Website Privacy Policy

Introduction

We respect your privacy and are committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you visit the Website and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect on or through this Website, as well as via email, text, and other electronic messages between you and this Website. This policy does not apply to information collected by:

  • Us offline or through any other means, including on any other website operated by Company or any third party; or

  • Any third party, including through any application or content that may link to or be accessible from or through the Website.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is to not use our Website. By accessing or using this Website, you agree to this privacy policy. This policy may change from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children Under the Age of 18

Our Website is not intended for children under 18 years of age. No one under age 18 may provide any information to the Website. We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information on this Website or through any of its features, register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Website, including information:

  • By which you may be personally identified, such as name, postal address, email address, telephone number, first name, last name, and any other identifier by which you may be contacted online or offline ("personal information"); and/or

  • About your internet connection, the equipment you use to access our Website, and usage details.

We collect this information:

  • Directly from you when you provide it to us.

  • Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through our own (first-party) cookies, as described in Cookies, below.

  • From service providers that help us run the Website, for example our payment processor, Stripe, when you pay.

Information You Provide to Us

The information we collect on or through our Website may include:

  • Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website, purchasing a Product, posting material, or requesting further services. If you check out as a guest, we keep your email address with the order to send your receipt and a link to your files. If you later create or sign in to an Esano account with that email and confirm it, those orders move into that account. We may also ask you for information when you report a problem with our Website or services.

  • Records and copies of your correspondence (including email addresses), if you contact us.

  • Your responses to surveys that we might ask you to complete for research purposes.

  • Details of transactions you carry out through our Website and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website.

  • Your search queries on the Website.

  • We do not store credit card information.

  • Tax information, if a vendor.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

  • Details of your visits to our Website, including traffic data, logs, and other communication data and the resources that you access and use on the Website. We read the country of each request, as reported by our hosting provider, only to choose which cookie rules apply to you. We never store it.

  • Information about your computer and internet connection, including your IP address, operating system, and browser type.

We do not use these technologies to follow your activity across other websites or online services, and we do not allow others to do so on our Website. You can change your cookie choices at any time in Privacy settings.

The information we collect automatically may include personal information, and we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

  • Estimate our audience size and usage patterns.

  • Store information about your preferences, allowing us to customize our Website according to your individual interests.

  • Speed up your searches.

  • Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

  • Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. Necessary cookies, such as the ones that keep you signed in and make checkout work, are always set. Optional cookies (Personalization and Analytics) are set only with your choice. In the United States they are on by default, and you can turn them off at any time in Privacy settings. We honor the Global Privacy Control signal from your browser. You may also refuse browser cookies by activating the appropriate setting on your browser, but then you may be unable to access certain parts of our Website.

  • No web beacons or pixels. We do not place web beacons, pixel tags or similar tracking images on our Website.

Service Providers and Stripe Cookies

We do not show advertisements on the Website, and we do not allow advertisers, ad networks or other third parties to place cookies, web beacons, pixels or other tracking technologies on it. The only cookies set by another company are those of our payment processor, Stripe, which it uses at checkout to prevent fraud (see Cookies, below). Our hosting providers process technical data, such as IP addresses, to deliver the Website securely.

Cookies

A cookie is a small file your browser stores for a website. This section lists the cookies we set and the choices you have. It gives more detail than the general descriptions of cookies elsewhere in this policy.

We do not run advertising on Esano and we do not use advertising or tracking pixels.

The cookies we use

  • sb-…-auth-token (necessary). Keeps you signed in. Lasts 400 days, or until you close the browser if you uncheck "Stay signed in".

  • esano-session-only (necessary). Remembers that "Stay signed in" is off. Lasts for the browser session.

  • esano_shop (necessary). Remembers which shop a seller is managing. Lasts 1 year.

  • esano_guest_orders (necessary). Opens the orders you bought without an account, on this browser. Holds a random access code for each order (up to 5) and is sent only to Esano's order pages. Lasts 400 days.

  • __stripe_mid and __stripe_sid (necessary, set by Stripe). Stripe fraud protection, used at checkout only. Last 1 year and 30 minutes.

  • esano_consent (necessary). Remembers your choices and which rules apply to you (ask first, or on by default). Lasts 12 months, then we ask again.

  • esano_vid (Personalization or Analytics). A random ID for this browser. It holds no name, email or other detail about you. Lasts 13 months.

Your guest cart and favorites stay in your browser's local storage. We count them as necessary because you asked us to save them.

When we set esano_vid

  • Only when Personalization or Analytics is on and you have a current choice. Outside the United States, that means after you say yes. In the United States, it is on by default.

  • With Personalization only: we use it for recommendations.

  • With Analytics only: we use it to count visits. We never link it to an account.

  • With both on: we use it for both.

  • With neither on (you said no, or your browser sends Global Privacy Control): we do not set it. If it already exists, we first make its history anonymous, then delete it.

  • With no current choice (your choice is more than 12 months old, or you used to be in the United States and are now somewhere that asks first): we keep an existing ID on your device but do not use it. We do not link it to an account, we record your events without it, and we show the banner. If you accept, the same ID is used again (you get a new ID if Personalization is newly on and the old ID was not already used with it). If you reject, or your browser sends Global Privacy Control, we make its signed-out history anonymous and delete it. If you are signed in when you reject, Personalization is also turned off for your account (see below). An unused ID still expires after 13 months.

What we collect

We record which product cards you see and click, which listing pages you view, and what you search for (with emails and long numbers removed, plus the number of results). We also keep a record of which choices (Personalization, Analytics) were on when each event happened.

Favorites, cart, purchases, refunds, shops you follow and reviews come from our database, because you took those actions on Esano (in your account, or at a guest checkout). We do not collect them as browser events.

These browsing events do not include your name, email address, IP address, precise location or any tracking across other websites. Our hosting providers (such as Vercel and Supabase) still see IP addresses in their normal security logs. We limit how often one network can send us events (300 batches a minute), change cookie choices (60 a minute) or use the download and delete tools (20 a minute). For that we keep only a scrambled (keyed-hash) version of the IP address, for no more than about a day.

When you sign in

We link esano_vid to your account only when Personalization is on for this browser and for your account (see below). Browsing from before you signed in that was recorded while Personalization was on joins the first account that signs in on that browser, so recommendations match what you have looked at. If a different account signs in on the same browser later, that account starts a fresh link: earlier signed-out browsing does not move to it, and it is made anonymous. Browsing recorded with only Analytics on is never added to an account, and turning Personalization on gives this browser a new ID. If only Analytics is on, we never link the ID to an account.

Shared devices. The browser ID works like a key for that browser: anyone who can use your device or browser can act as that browser, for example by browsing so that it shows up under your ID, or by signing in and having it linked. We accept this because the ID holds no personal details and is not used to sign you in. If you share a device, turn Personalization off or use Delete my activity.

Your choice when you are signed in

When you are signed in, your Personalization choice is saved for your account (with a dated record of your choices), not only for this browser. If you turn Personalization off while signed in, it is off for your account on every device. We make the browsing saved to your account anonymous and remove the links between your account and every browser. Your other devices keep their IDs, but they record nothing personal while your account is off, and none of that browsing is ever added to your account. If you turn Personalization on again, your account starts fresh: only browsing recorded from then on, with Personalization on, is saved to it. Turning it on for your account never turns it on for a browser where it is off, where you rejected it, or where Global Privacy Control is on. When you are not signed in, your choice is saved on this browser for 12 months.

If you say no, or turn something off

  • The site works the same.

  • Views and searches are still counted, without an ID and without a link between pages.

  • You do not get personal recommendations based on your browsing.

  • Turning Personalization off stops collection right away, makes the history tied to you anonymous, removes the browser ID's link to your account and deletes the ID from this browser. Once a browser ID is withdrawn (you turned Personalization off in that browser, said no, or deleted your activity), it is never linked to an account or used again: any later events carrying it are stored anonymous. Turning only Analytics off while Personalization is on keeps the ID, because Personalization still uses it.

Keeping and deleting

  • We keep browsing events tied to a person for 13 months. After that, we remove the link to the person and keep only anonymous counts.

  • Delete my activity (Account settings → Privacy & cookies) removes your browsing events and the links between your account and your browsers. It also withdraws the ID of the browser you are using, even if it was not linked to your account yet, so it is never used again. Your other browsers keep their IDs; they are linked again only if Personalization is on when you next use them signed in. If Personalization is off for your account, we keep the record of your former browsers, so they stay off and nothing they record joins your account; we delete that record when Personalization is on. We also keep a note of when you deleted your activity: one for each browser involved, with no link to your account, and one for your account. These notes are kept about a day: once they are more than 24 hours and 5 minutes old, they are removed within the hour. Activity that happened before you deleted it, but reaches us afterwards, is kept only as anonymous counts and is never added back to your account, even when a browser is linked again or you are signed in on a new browser. Purchases, receipts, downloads and reviews stay, because we need them to run the store and keep tax records. We also keep a record of your cookie choices. If your account is deleted, the browser IDs are removed from the events tied to you, so they stay only as anonymous counts.

  • Download my data (same page) gives you a file with your browsing activity, the history of your cookie choices, the browsers linked to your account, the browsers we remember only to keep them from being linked while your Personalization is off, your personalized-recommendations setting, and the time of your last Delete my activity while we still keep that note. That setting is stored apart from your public profile, and only you can read it.

Global Privacy Control

If your browser sends a Global Privacy Control signal, we treat it as a no to Personalization and Analytics in that browser. We show no banner in that case, and the switches stay off. If the browser already has an ID, we make its signed-out history anonymous and delete it. The signal applies to that browser only: it does not change your account's choices or what your other devices do.

Where the rules start from

  • United States: Personalization and Analytics are on by default, and you can turn them off at any time.

  • Everywhere else, and when we cannot tell where you are: nothing optional runs until you say yes. You see a banner with Reject all, Accept all and Choose cookies.

Our hosting provider tells us the country of each request. We use it only to decide this, and we never store it. If you use a VPN, the rules for the place the VPN says you are apply to you. Until the site has checked, nothing optional is collected.

Change your choices

Open Privacy settings at any time, or use the "Privacy settings" link in the footer of every page. If you are signed in, you can also use Account settings → Privacy & cookies.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

  • To present our Website and its contents to you, including internal business purposes such as fraud, threat detection, and marketing to you.

  • To provide you with information, products, or services that you request from us.

  • To fulfill any other purpose for which you provide it.

  • To provide you with notices about your account.

  • To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.

  • To notify you about changes to our Website or any products or services we offer or provide though it.

  • In any other way we may describe when you provide the information.

  • For any other purpose with your consent.

Disclosure of Your Information

We may disclose aggregated and de-identified information about our users without restriction. We may disclose personal information that we collect or you provide as described in this privacy policy:

  • To our subsidiaries and affiliates.

  • To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

  • To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Esano L.L.C.'s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Esano, L.L.C. about our Website users is among the assets transferred.

  • To fulfill the purpose for which you provide it. For example, if you give us an email address to use the "email " feature of our Website, we will transmit the contents of that email and your email address to the recipients.

  • For any other purpose disclosed by us when you provide the information.

  • With your consent.

We may also disclose your personal information:

  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

  • To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes.

  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

  • Cookie choices. You can turn Personalization and Analytics on or off at any time in Privacy settings or, when signed in, in Account settings → Privacy & cookies. When you are signed in, turning Personalization off applies to your account on every device. A Global Privacy Control signal from your browser turns both off in that browser. You can also set your browser to refuse all or some cookies; if you refuse necessary cookies, parts of the Website (such as signing in and checkout) may not work.

  • Your activity data. When signed in, you can download or delete your browsing activity in Account settings → Privacy & cookies. The download also includes your choices history and your personalized-recommendations setting. Purchases, receipts, downloads and reviews are kept.

  • Advertising. We do not show advertising, and we do not share your personal information with third parties for their own marketing.

Residents of certain states may have additional personal information rights and choices. Please see Your State Privacy Rights, below, for more information.

Accessing and Correcting Your Information

Subject to applicable law, you can review and change your personal information by logging into the Website and visiting your account profile page. You may also send us an email at customerservice@esano.com to request access to, correct, or delete any personal information that you have provided to us. In certain circumstances, we cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information. For example, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with rights to:

  • Confirm whether we process their personal information.

  • Access and delete certain personal information.

  • Correct inaccuracies in their personal information, taking into account the information's nature processing purpose (excluding Iowa and Utah).

  • Data portability.

  • Opt-out of personal data processing for:

    • targeted advertising (excluding Iowa);

    • sales; or

    • profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).

  • Either limit (opt-out of) or require consent to process sensitive personal data.

The exact scope of these rights may vary by state. To exercise any of these rights please email: customerservice@esano.com or call 888-463-7051. To appeal a decision regarding a consumer rights request please email customerservice@esano.com.

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request to this designated address: customerservice@esano.com. However, please know we do not currently sell data triggering that statute's opt-out requirements.

Data Security

We have implemented measures designed to secure your personal information from loss and from unauthorized access, use, alteration, and disclosure. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal information, we will notify you through a notice on the Website home page. The date the privacy policy was last revised is identified at the bottom of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

To register a complaint or concern, please email customerservice@esano.com

Last modified: 10/8/2026