We don't want your data any more than we have to.

This policy covers cyberwhatnot.com (the store) and this site. It's written in plain language on purpose — no legal team wrote this, just the person running the brand, being straight about what happens to your information.

The short version

• We don't sell your data. Ever.
• We don't use your data for marketing, retargeting, or ad purposes.
• We never see or store your full credit card number. Payments are handled entirely by Stripe.

What we collect

When you place an order, we (and the services we use to run the store) collect what's needed to process and ship it: your name, email address, shipping address, and order details. If you email us directly — a question, a badge/event support request, a design pitch — we keep that email and whatever you send with it.

Payments

All payments are processed by Stripe, a third-party payment processor. Stripe is PCI-compliant, and your full card details go directly to them — we don't hold, see, or store credit card numbers on our end. Stripe's own privacy policy governs how they handle that payment data.

Order fulfillment

Products are printed and shipped through a print-on-demand partner (Printify), who receives the shipping information — name and address — needed to get your order to you. They fulfill the order; they don't get anything beyond what's needed to ship it.

What we don't do

• We don't sell, rent, or trade your personal information to anyone.
• We don't use your data for marketing emails, ad targeting, or retargeting pixels.
• We don't share your information beyond what's needed to process payment (Stripe) and ship your order (our fulfillment partner).

Cookies and analytics

This site is a small static site with no accounts, no ad trackers, and no marketing cookies. The store may use basic, standard e-commerce cookies to keep your cart working during checkout — nothing beyond that.

How long we keep data

We keep order records as long as reasonably needed for things like customer support, accounting, and tax purposes. If you email us, we keep that correspondence unless you ask us to delete it.

Security

We rely on reputable, established providers (Stripe for payments, our fulfillment partner for shipping, Cloudflare for hosting) who maintain their own security standards for the data that passes through them. No method of storage or transmission over the internet is 100% secure, and we can't guarantee absolute security — but we don't hold sensitive data ourselves beyond what's described in this policy, which limits what there is to protect.

Third-party links

This site links out to places like our store and, occasionally, third-party services (Stripe, social platforms, event pages). Those sites have their own privacy policies, and we're not responsible for their content or practices. This policy only covers Cyber Whatnot.

Children's privacy

Cyber Whatnot isn't directed at children, and we don't knowingly collect information from anyone under 13. If you believe a child has given us personal information, email us and we'll delete it.

Your privacy rights

A number of U.S. states — including California and Texas — have their own consumer privacy laws (for example, the California Consumer Privacy Act / CPRA and the Texas Data Privacy and Security Act). Rather than sort out exactly which law applies to which visitor, we extend the same set of rights to every customer, no matter what state you're in:

• Right to know / access — what personal information we have about you.
• Right to correct — inaccurate personal information.
• Right to delete — your personal information, subject to limited exceptions (like records we're legally required to keep for tax purposes).
• Right to opt out of sale, sharing, or targeted advertising — moot in our case, since we don't do any of those things to begin with.
• Right to non-discrimination — we won't deny you goods or services, charge you a different price, or give you a different level of service because you exercised any of these rights.
• Right to designate an authorized agent — someone can submit a request on your behalf, though we may still need to verify your identity directly.

To exercise any of these rights, email hello@cyberwhatnot.com. We may ask you to verify your identity (e.g., confirming the email address on the order) before acting on a request, so someone else can't access or delete your data by pretending to be you. We'll respond within 45 days of a verifiable request; if we genuinely need more time, we'll tell you why and extend that by up to another 45 days. If we deny a request, you can appeal by replying to our response, and we'll take a fresh look.

Do Not Track

Some browsers send a "Do Not Track" signal. Since we don't run ad trackers or behavioral tracking across other sites in the first place, there's nothing for that signal to turn off — but we don't track you either way.

International visitors

If you're ordering from outside the United States, know that the services we use to process payments and fulfill orders (Stripe, our fulfillment partner) may process and store data in the United States or other countries where they operate.

Governing law

This policy is governed by the laws of the State of Texas, without regard to its conflict-of-law principles. Any dispute arising from this policy or your use of Cyber Whatnot will be handled in the state or federal courts located in Texas.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. We're not going to bury changes or quietly loosen what we've promised here.

Contact

Questions about privacy or how your data is handled: email hello@cyberwhatnot.com.