This policy explains how Plug uses information for browsing, accounts, Google sign-in, favourites, carts, customisations, checkout history, and seller checkout.
Plug may collect information you enter or save on the site, including your first name, last name, email address, mobile number, shipping address, product choices, custom text, selected dates, cart items, favourites, and checkout details.
Plug accounts use Firebase Authentication and Cloud Firestore. If you create an account or sign in, Plug may store your profile details, shipping address, email verification status, and account identifiers so you can access the same profile across devices.
If you continue with Google, Google and Firebase help authenticate you. Plug may receive basic account information from Google, such as your name and email address. If that email matches an existing Plug account, Plug may link the sign-in method to the existing account so the same profile details are used.
When you use forgot password, Firebase sends a reset email to the address linked to your account. Plug uses that process to confirm the reset request and let you create a new password through Firebase Authentication.
Plug uses browser storage on your device for carts, favourites, checkout history fallbacks, product customisation drafts, and vape age confirmation. This keeps your selections available while browsing. Clearing browser data may remove these saved choices.
Some product pages let you choose image files for custom products. Plug does not use Firebase Storage for these uploads. Selected images are kept on your device for checkout preparation, and the checkout message may include the filenames and a note asking you to attach the images in WhatsApp.
Checkout happens through WhatsApp. When you checkout, Plug may share your selected products, quantities, prices, options, customisation text, uploaded image filenames, and relevant delivery or collection details with the seller so they can confirm availability, payment, delivery, or collection.
For signed-in users, Plug may save checkout history in Firestore so it can appear on the account page. A local copy may also be kept on your device. Checkout history may include the business name, product names, quantities, prices, product links, and checkout time.
Plug uses Firebase security rules, account authentication, email verification checks, and browser-side validation to help protect account and order information. No website can guarantee perfect security, so users should keep their password private and avoid sharing sensitive information unnecessarily.
Plug links to or uses services such as Firebase, Google sign-in, WhatsApp, Instagram, email, phone links, maps, and seller social pages. Those services may process information under their own privacy policies and terms.
You can update your account profile from the account page, remove items from your cart or favourites, clear browser storage, or contact Plug to ask about account information connected to your email address.
For privacy questions, contact Plug through the email, phone, WhatsApp, or Instagram links provided on the site.