What an order stores
Ordering takes the few things a shop needs to hand you the right cup. This is the whole list, written out of the code that does the storing.
id- your order number
createdAt- when you placed it
status- where it is — received, making, ready, picked up
fulfilment- pickup or delivery
when- the pickup time you chose
whenLabel- that time in words
name- the name for the order
phone- a phone number, so the shop can reach you about this order
email- an e-mail address, if you gave one, for the receipt
address- a delivery address, only if you chose delivery
lines- what you ordered
totals- what it came to
payment- how it was paid, and whether it was
courier- the courier job, if the order is a delivery
ip_hash- a one-way hash of your IP address — never the address itself
tokenHash- a one-way hash of the link that shows you this order
For how long
An order deletes itself 90 days after it is placed. That is not a policy somebody has to remember — the record is written with an expiry and the store removes it.
Your IP address
It is never written down. What is stored is a one-way hash of it, which lets the shop see one connection placing fifty orders without ever holding the address itself. The hourly order limit counts the same hash.
How strong that hash is depends on one setting, and this page will not overstate it. With the shop's private salt configured, the stored value is a full salted digest and cannot be turned back into an address. Without it — which is how this demonstration runs — the value is a shortened hash mixed with a constant that is published in this project's own source, so somebody determined and technical could work back from it to an address. It is not a strong anonymisation, and calling it one would be the kind of claim the rest of this build exists to avoid.
Who can see an order
The shop, on the kitchen board. And you, through the link you were given after checkout: the order number alone is not enough, because the number is read out across a counter. Only a hash of that link is stored, so a copy of the database does not open anybody's order.
What is not here
No card number ever reaches this site — payment happens on the payment provider's own page. There are no advertising trackers, no analytics scripts and no third-party cookies. Nothing you type is sent anywhere except to the shop.
Magic Smoothies · 4285 N Atlantic Ave, Cocoa Beach, FL 32931 · (321) 613-3604