Privacy Policy

The website desertcities.cc is operated from the Coachella Valley, California by KTN Taylor, which sells under the brand Desert Cities (“we,” “us,” or “our”). This Privacy Policy explains what we collect, why, who we share it with, and how long we keep it.

We sell within the United States only.

When you order

• Name, email, shipping address and phone number, entered on Square's checkout page
• Payment details, processed by Square — we never see or store full card numbers
• For a personalized item such as the photo hat: the photo you upload
• If you arrived from a link in one of our emails or ads, the campaign tags in that link (such as utm_source, gclid or fbclid), attached to your order
• If you came to us from our Facebook or Instagram Shop, which of the two you came from, attached to your order
• If you accepted our consent banner, two identifiers the Meta Pixel set in your browser (the _fbp and _fbc cookies), attached to your order

Reservations. Until checkout opens on October 23, 2026, you can reserve an order instead of paying for it. We keep the email address, name and shipping address you give us, with what you reserved, so we can email you a link to pay when checkout opens and fill in your order then. We send two emails about it: a confirmation, and one when checkout opens. We delete a reservation 60 days after it's made.

When you join (optional — you can check out as a guest)

• Your email address, and your name if you give it
• Whether you ticked the box to get our emails, and if you did: when, on which page, and the exact words of the box, and when you first signed in, which shows the address is yours
• A Google account identifier if you sign in with Google
• Dates you joined and last signed in
• A customer record at Square, linked to your account

When you request a custom order or a quote

• Name, email and phone number
• The details of the job: garment, decoration, quantity, colors, budget, the date you need it by, and any notes you write
• Any artwork files you upload — see Custom Orders and Photo Uploads below
• If you followed a link from one of our emails or ads, the campaign tags in that link (such as utm_source, gclid or fbclid)

If you're on our email list

• Your email address and name, and when and where you signed up
• If you sign up through the offer in our Facebook or Instagram Shop, Meta passes us the email address you gave it and the date you signed up

Automatically

• Your IP address and browser type, which our hosting provider records in server logs and which we use to rate-limit our forms and prevent abuse
• Signals from your browser that Cloudflare Turnstile reads to check our forms aren't being filled in by bots
• Usage data (pages visited, browser type, time on site), via Google Analytics, and the pages and products you view and add to your cart, via the Meta Pixel, only if you accept them; see Cookies & Analytics

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Produce and quote custom orders
• Send the artwork or photo for your order to the printer that makes it
• Respond to your questions
• Run your account, including the members' feed of early looks at new drops
• Prevent fraud and abuse of our forms
• Understand how the site is used, so we can improve it (only with your consent)
• Send occasional offers and members' news to people on our email list — every email has an unsubscribe link
• See which of our emails and ads lead to orders and requests, using the campaign tags in their links
• Measure which of our Facebook and Instagram ads lead to visits and orders, and show our ads to people who have visited our site (only with your consent)
• Comply with legal obligations

If you request a custom order, the details you enter and any artwork you upload are stored on Google Cloud, a copy of the request (with private links to your files) is emailed to us so we can quote it, and the request is copied into the order-management system we run ourselves.

If you order a personalized item such as the photo hat, your photo is stored on Google Cloud and linked to your Square order.

Uploaded files are stored privately and are reachable only through unique, unguessable links. They are not published, indexed or listed anywhere public.

We use your artwork or photo only to quote and produce your order. To produce it, we send the file to the printer that makes your item. We will ask you first before using it for anything else, such as showing an example of our work.

We do not sell your personal information. If you accept our consent banner, we share information about your visit and, if you buy, your purchase with Meta for advertising, which California law calls “sharing” (see Cookies & Analytics). Otherwise we share it only with the providers we need to run the store:

• Square — payment processing, order records and customer records
• Google Cloud / Firebase — hosting, our database, file storage, server logs and account sign-in
• Google Analytics — site usage measurement, only if you accept it (see Cookies & Analytics)
• Meta — measuring and targeting our ads on Facebook and Instagram, through the Meta Pixel and the Conversions API, only if you accept them (see Cookies & Analytics)
• Cloudflare — the Turnstile bot check on our forms
• Resend — sending order, request and account email, and email to people on our list
• Google (Gmail) — receiving business email, including the copies of the requests you send us
• Snake Drive Screen Printing (Coachella Valley, California) — our printer for custom orders and the photo hat; it receives the artwork or photo needed to print your order
• Printful — prints and ships our mugs; it receives your order and the contact and shipping details needed to deliver it
• USPS and the carriers Printful uses — delivering your order

We may also disclose information where required by law.

If you're on our email list, we send occasional offers and members' news from hello@desertcities.cc through Resend. You can join the list on our site, by ticking the box when you join as a member, or through the sign-up offer in our Facebook and Instagram Shop, where Meta collects your address and passes it to us. Every email has an unsubscribe link; one click takes you off the list, and we then keep your address only to make sure we don't email you again. We don't track whether you open our emails or which links you click. Links to our store carry campaign tags, so we can count the orders an email brings in, in total rather than by person. Order, request and account emails, such as the link to set your password when you join, are sent whether or not you're on the list.

We'd rather tell you plainly than imply a schedule we don't run.

• Artwork for a custom-order request is deleted from our file storage automatically 180 days after you upload it. The request itself, and the email copy we receive, are kept until you ask us to delete them.
• Photos for personalized items are deleted from our file storage automatically no later than 90 days after your order ships. The copy attached to our purchase order and the copy we email our printer are kept with our order records.
• Order, payment and account records are kept for our tax and accounting records and for as long as your account is open. Square also keeps order and payment records under its own terms.
• The Meta cookie values attached to an order are kept with the order records.
• Records of the emails we send you (the address, and whether each was delivered) are kept until you ask us to delete them.
• Server logs, which include IP addresses, are kept for up to 365 days.
• Our email list: if you unsubscribe, we keep your address only so we don't email you again.
• The record of your sign-up to our email list (when, where, and the words you agreed to) is kept while you're on the list, and afterwards only with your address, so we don't email you again.

If you want your data deleted, email us and we will do it — see below.

We use Google Analytics 4 to understand how visitors use our site. It loads only if you accept it in our consent banner. Until you choose, or if you decline, your browser doesn't contact Google Analytics at all. If you accept, Google Analytics sets cookies that let it recognize repeat visits, and records the pages you view, your browser type and your IP address; if you buy, it also receives your order number and total. Google's advertising features stay off for everyone: we never allow ad storage, ad user data or ad personalization. Google processes this data under its Privacy Policy.

Meta Pixel. If you accept our consent banner, our site also loads the Meta Pixel, Meta's code for measuring our ads on Facebook and Instagram. Until you choose, or if you decline, your browser doesn't contact Meta at all. If you accept, the Pixel sets cookies (_fbp, and _fbc if you came from a Meta ad) that let Meta recognize your browser, and sends Meta the pages you view, the products you view and add to your cart, your IP address and your browser type; if you buy, it also sends your order number, total and the products in it. When you complete an order, our server also sends Meta that purchase directly (Meta's Conversions API), with the email address, phone number and ZIP code from your order, each hashed before it leaves us, so Meta can match the purchase to an ad you saw without receiving them in readable form. We keep the two Meta cookie values with your order for the same purpose. Meta uses this information to measure our ads and choose who sees them, and may collect information about your activity across other sites and apps over time. Meta processes it under its Business Tools Terms and its Privacy Policy.

To change your choice, clear this site's cookies and local storage; the banner comes back. You can also block Google Analytics on every site with Google's opt-out tool. You can also choose how Meta uses your activity for ads in your Facebook or Instagram ad settings.

What else is stored in your browser. Your cart, your consent choice and your language are kept in your browser. Until you close your browser, a cookie of our own (dc_first_touch) also keeps the campaign tags from the link that brought you here (such as utm_source, gclid or fbclid), so an order or request can be credited to that email or ad. It holds only those tags. We set it whether or not you accept our banner, because it is only ever attached to an order or request you send us. A browser that reopens your last session may keep it longer. While you check out, we set short-lived cookies (one hour at most) so we can match your return from Square's checkout to your order. If you sign in, Firebase keeps your session in your browser, and we set a cookie (__session) that lets our site show you the members' feed. It lasts up to 14 days, or until you sign out. If you accept, the Meta Pixel's cookies are kept for up to 90 days.

Do Not Track. Our site doesn't change what it does in response to a browser's Do Not Track signal. Google (for Analytics) and Meta (for the Meta Pixel), each only if you accept it, and Cloudflare (for the bot check on our forms) receive information about your visit to provide those services. The Meta Pixel is the only advertising tracker on our site, and it loads only if you accept it. If your browser sends a Global Privacy Control signal, we treat it as declining Meta: the Meta Pixel doesn't load and our server sends Meta nothing about your visit or your purchase, even if you accepted our banner.

We implement reasonable security measures including TLS encryption and tokenized payment processing. Access to our admin tools, database and stored files is limited to us and to the systems that run the store. No method of internet transmission is 100% secure; we cannot guarantee absolute security.

Whatever state you live in, you can ask us to:

• Tell you what personal information we hold about you
• Correct anything that's wrong
• Delete your information, including any artwork or photo you've sent us

You can also:

• Limit analytics and advertising — decline our consent banner (neither Google Analytics nor the Meta Pixel then loads, and we send Meta nothing about your orders), or block Google Analytics on every site with Google's opt-out tool
• Unsubscribe from our emails — use the link at the bottom of any of them

Email hello@desertcities.cc and we'll take care of it. We aim to respond within 30 days. We may need to keep certain order and tax records even after a deletion request, and we'll tell you if that applies.

Our store is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, email us and we'll delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the effective date above. Continued use of our store after changes are posted constitutes acceptance of the revised policy.

Questions?

KTN Taylor
Selling under the brand Desert Cities
P.O. Box 5482, La Quinta, CA 92248
hello@desertcities.cc