EmGee.dev / Work / New Melbourne Browncoats
New Melbourne Browncoats
A fan club's new site and shop: posts, events, photos and membership sales through PayPal, replacing WordPress and Ecwid.
About
Same look and the same addresses as the club's WordPress site, plus an editor for posts, pages, events and photos and a shop of its own in place of Ecwid, taking payment through the club's PayPal account.
In preview now; the club decides when it goes live. Until then the current site stays as it is.
What it does
- Shop with memberships and merchandise, paid through PayPal.
- Events and photo galleries.
- Contact form with spam limits.
What's next
- Go-live on the club's own domain, when the committee is ready.
Security statement
- Card details are entered at PayPal, never on our server. Prices are set by the server, not the browser.
- Editors sign in as on Mothercraft Care: scrypt-hashed passwords, one-time set-up links, throttled sign-in.
- Contact and order forms limited to 6 per address per 10 minutes.
- Payment keys readable only by the site's own system user.
- The preview is not indexed by search engines.
Shared platform measures (servers, backups, updates, monitoring) are on the Security page. Found a problem? security@emgee.dev.
Privacy statement
What it keeps
- Orders: name, email, postal address, what was bought, and membership application answers.
- Contact form messages.
- Editor accounts.
Why
To fill orders, process memberships and answer messages, on the club's behalf.
Where it is kept
On our web server in Melbourne. Nightly encrypted backups (see Security); daily copies kept 2 weeks, weekly 2 months, monthly 1 year.
Who else sees it
| Service | What for | Where |
|---|---|---|
| PayPal | Takes payment, into the club's own PayPal business account. | Australia / USA |
| Resend | Sends order confirmations and forwards messages to the club. | USA / Japan |
| Cloudflare | Delivers the site and blocks attacks; sees IP addresses and request details. | Global |
How long, and deleting it
Orders are kept as the club's financial records; contact messages until the club deletes them. Ask and we delete what is not needed for those records.
The club decides what is collected and why; EmGee.dev looks after it for them. Ask what we hold about you, correct it or have it deleted at privacy@emgee.dev; we answer within 30 days. The general Privacy page covers your rights under the Australian Privacy Principles.
Contact
Questions about New Melbourne Browncoats: hello@emgee.dev. Security reports: security@emgee.dev. Privacy: privacy@emgee.dev.