Privacy Policy — SneakerPing

NON-LEGAL-ADVICE NOTICE

This policy explains how we handle personal information for SneakerPing. It is for general information only and is not legal advice.

WHO WE ARE

SneakerPing is a product operated by Clutch Digital LLC, a company based in the United States ("we," "us," "our"). This policy explains how we collect, use, share, and safeguard personal information across our website, app, and related services (the "Services"). Contact us at patrick@sneakerping.com or by mail at 4460 Spring Blvd, Eugene, OR 97405. You may also submit privacy requests at https://sneakerping.com/contact.

SCOPE & AUDIENCE

• This policy applies to website/app visitors, registered account holders, and paying customers.
• It covers our online interfaces and related Services we operate.
• It does not cover third-party websites, apps, communities, or services that we do not control; those are governed by their own privacy policies.

INFORMATION WE COLLECT

A. Categories of Information

• Identifiers: name, email address, username, and similar identifiers.
• Commercial Information: purchases, subscriptions, plan tier, and transaction totals (we do not store full card numbers).
• Payment Information: processed by Stripe; limited billing details may be stored for receipts, tax, and support.
• Device/Usage Data: IP address, device type, browser/OS, pages viewed, events/actions, referral URLs, and timestamps.
• Geolocation Data (if used): approximate location inferred from IP or your settings.
• Communications & Preferences: newsletter/SMS opt-ins, unsubscribes, and preference settings.
• User-Generated Content & Logs: settings, saved preferences, feedback, support messages, activity logs, and community interactions (e.g., Discord if you connect).
• Social/SSO Data: if you sign in with Google or Discord, we receive account identifiers and basic profile info you permit.

B. Sources of Information

• Directly from you: account sign-up, purchases, forms, support requests.
• Automatically: through cookies, SDKs, and similar technologies.
• Third Parties: payment processors (Stripe), analytics (Google Analytics), ad/attribution partners (Google, Meta, TikTok), identity providers (Google/Discord), messaging providers (Resend for transactional email, Kit.com for newsletters, Twilio for SMS), hosting/database providers (Vercel/Supabase), and other providers you choose to connect.
• Public Sources: public websites and social media (where permitted by law).

C. Children's Privacy (COPPA)

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact patrick@sneakerping.com so we can delete it.

HOW WE USE INFORMATION (PURPOSES)

We use personal information to:

• Provide, operate, and maintain the Services (account creation, authentication, core features).
• Process payments and manage subscriptions via Stripe; detect and prevent fraud via Stripe Radar.
• Analyze usage and improve features, performance, and user experience (Google Analytics and similar tools).
• Communicate with you about your account, purchases, updates, and support (e.g., transactional email via Resend; newsletters via Kit.com; SMS via Twilio; community/notification channels such as Discord if you opt in or connect).
• Detect, prevent, and respond to fraud, abuse, spam, and security incidents.
• Comply with legal obligations and enforce our terms and policies.
• Conduct marketing/attribution and measure campaign effectiveness (Google Ads, Meta, TikTok pixels) where permitted.
• Protect our rights and defend against legal claims.

LEGAL BASES FOR PROCESSING (EEA/UK USERS, IF APPLICABLE)

Where the GDPR/UK GDPR applies, our legal bases may include:

• Contract: to provide the Services you requested (e.g., account, payments, features).
• Legitimate Interests: to operate, secure, and improve the Services; prevent fraud; perform analytics and basic marketing; and communicate about non-marketing service updates (balanced against your rights).
• Consent: where required for cookies/SDKs, targeted advertising/remarketing, newsletters/SMS, and specific data uses. You may withdraw consent at any time through settings or by contacting us.
• Legal Obligation: to meet recordkeeping, tax, accounting, or regulatory requirements.

SHARING & DISCLOSURE

We share personal information as described below:

Service Providers/Processors (to operate the Services under our instructions):

• Payments & Fraud Prevention: Stripe (payments), Stripe Radar (anti-fraud screening).
• Hosting/CDN: Vercel (application hosting, edge/CDN).
• Database: Supabase (managed database and related services).
• Analytics: Google Analytics (usage measurement); see "Analytics Details".
• Email: Resend (transactional email such as receipts, alerts, and account notifications); Kit.com (newsletters and promotional email).
• SMS/MMS: Twilio (text messaging; marketing and/or transactional where applicable).
• Authentication/Identity: Google Sign-In; Discord Sign-In (SSO/OAuth).
• Community/Notifications: Discord (community features or notifications, if connected/opted in).
• Advertising/Attribution: Google Ads, Meta, TikTok (pixels that measure and attribute campaigns).
• Additional Providers: support desk, error monitoring, logging/observability, A/B testing, consent management, asset optimization, and user file storage.

Business Transfers: In connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

Legal Compliance & Safety: We may disclose information to comply with law, court orders, or lawful requests, and to protect the rights, property, or safety of users and the public.

SALE/SHARE/TARGETED ADVERTISING STATUS

Because we use advertising/attribution pixels (Google Ads, Meta, TikTok), we may "share" personal information for targeted advertising as defined by the California Privacy Rights Act (CPRA). You can opt out via contacting us through our contact page at https://sneakerping.com/contact. We do not knowingly "sell" personal information for money.

COOKIES & TRACKING TECHNOLOGIES

Categories:

• Strictly Necessary: essential for login, security, and core functionality.
• Analytics: used by Google Analytics to understand usage and improve the product.
• Functional: remember preferences and enhance features.
• Advertising/Attribution: Google Ads, Meta, and TikTok pixels to measure campaigns and show more relevant content, where permitted.

Your Choices:

• Browser Controls: you can block or delete cookies; this may affect site functionality.
• Cookie Banner/Settings: manage categories via our banner or settings (if provided), including advertising/attribution.
• Analytics Opt-Out: see the Google Analytics opt-out tools below.
• Global Privacy Control (GPC): Where required, we treat a valid GPC signal as a request to opt out of "sale"/"sharing"/targeted advertising for that browser. See "Your Privacy Rights" for how to exercise broader choices.

ANALYTICS DETAILS — GOOGLE ANALYTICS

• What GA Collects: page views, referrers, device/browser data, and events (e.g., clicks, scrolls). GA helps us understand how the Service is used and which features to improve.
• Controls & Opt-Outs: you can install the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout) and adjust Google Ads settings (https://adssettings.google.com).
• Data Retention: Google Analytics data is retained for 24 months.
• IP Anonymization: YES

PAYMENTS — STRIPE

Stripe processes payments on our behalf. We do not store full payment card numbers on our servers. Stripe may use personal information for fraud prevention and compliance (including Stripe Radar). See Stripe's Privacy Policy: https://stripe.com/privacy.

MARKETING COMMUNICATIONS (EMAIL/SMS & COMMUNITY)

• Email (Resend & Kit.com): Newsletters and promotional emails are sent through Kit.com where permitted or opted in; transactional emails (e.g., receipts, alerts, account updates) are sent through Resend. You can unsubscribe from marketing email at any time using the link in the footer. Transactional emails may still be sent.
• SMS/MMS (Twilio): Where used, we obtain your consent where required. Message and data rates may apply. You can reply STOP to opt out or HELP for help. Frequency varies.
• Discord Notifications/Community: If you connect your account or join our community, we may send product/community notifications via Discord. You can adjust settings in Discord or disconnect at any time.
• Compliance: We follow CAN-SPAM for email and TCPA/CTIA guidance for SMS where applicable.

DATA RETENTION

We keep personal information only as long as needed for the purposes described above, to comply with legal obligations, resolve disputes, and enforce agreements.

• Account Data: while your account is active + 12 months after closure.
• Transaction Records (invoices, receipts): 7 years for tax/audit purposes.
• Support Tickets: 12 months after resolution.
• Analytics Data: retained for 24 months.
• Backups/Logs: retained for 24 months for security and reliability.

We may anonymize or aggregate data for statistical purposes and retain non-identifiable data longer.

SECURITY

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us at https://sneakerping.com/contact.

INTERNATIONAL DATA TRANSFERS

We are based in the United States and may process and store data in the US or other countries. If you are in the EEA/UK, we use appropriate transfer mechanisms (e.g., Standard Contractual Clauses) with our processors where required. To request our Data Processing Addendum (including transfer terms), contact us at https://sneakerping.com/contact.

YOUR PRIVACY RIGHTS (UNITED STATES)

Depending on your state (e.g., CA, VA, CO, CT, UT, and others), you may have rights such as:

• Access/Know: request details about categories and specific pieces of personal information we collected.
• Correction: request correction of inaccurate personal information.
• Deletion: request deletion of personal information, subject to legal exceptions.
• Portability: request a copy in a portable format.
• Opt-Out: opt out of "sale," "sharing," and targeted advertising (where applicable). Opt out at https://sneakerping.com/contact.
• Limit Use of Sensitive Personal Information (if we collect any).
• Non-Discrimination: you will not be discriminated against for exercising your rights.
• Appeal: in certain states, you can appeal our decision on your request.

How to Exercise: submit a request via https://sneakerping.com/contact or email patrick@sneakerping.com. We will verify your request (e.g., by email verification or account sign-in). Authorized agents may submit requests with appropriate authorization and verification. We typically respond within 45 days (or as permitted by law).

Do Not Track & GPC: We do not respond to browser "Do Not Track" signals. Where required, we treat a valid Global Privacy Control (GPC) signal as a request to opt out of "sale"/"sharing"/targeted advertising for that browser.

YOUR RIGHTS (EEA/UK), IF APPLICABLE

Under the GDPR/UK GDPR, you may have the rights to access, rectification, erasure, restriction, portability, and objection; to withdraw consent at any time; and to lodge a complaint with your supervisory authority.

THIRD-PARTY LINKS & INTEGRATIONS

Our Services may include links to third-party websites, embedded content, pixels, or SDKs (e.g., Google, Meta, TikTok, Discord). We do not control these third parties and are not responsible for their privacy practices. Review their privacy policies before providing personal information.

CHANGES TO THIS POLICY

We may update this policy to reflect changes in our practices or the law. When we post changes, we will revise the "Last updated" date above. For material changes, we may provide additional notice (e.g., email or in-app notification).

CONTACT US

Questions or requests?

• Email: patrick@sneakerping.com
• Mail: 4460 Spring Blvd, Eugene, OR 97405
• Privacy Requests: https://sneakerping.com/contact

APPENDIX — STATE NOTICES & CPRA CATEGORIES (RECOMMENDED)

A. State Notices

• California (CPRA): California residents can request access, deletion, correction, and portability, and can opt out of "sale"/"sharing" and targeted advertising. To opt out of "sharing" for targeted advertising, submit a request at https://sneakerping.com/contact.
• Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA): Similar rights may apply (access, deletion, portability, correction, and opt out of targeted advertising and certain profiling). Appeals process available where required.
• Verification & Response: We verify requests to protect your data and respond within applicable timelines.

B. CPRA Category Mapping (Adjust "Collected?" and "Shared for Targeted Advertising?")

• Identifiers (e.g., name, email, IP): Collected? Yes. Shared for Targeted Advertising? No.
• Customer Records (e.g., billing info via Stripe): Collected? Yes. Shared? No.
• Protected Classifications: Collected? No (not sought). Shared? No.
• Commercial Information (e.g., purchases/subscriptions): Collected? Yes. Shared? Yes with Stripe.
• Internet/Network Activity (e.g., analytics events, ad pixels): Collected? Yes. Shared? Yes.
• Geolocation (approximate): Collected? Yes. Shared? Shared with Stripe.
• Sensory Data: Collected? No. Shared? No.
• Professional/Employment: Collected? No (unless provided). Shared? No.
• Non-Public Education: Collected? No. Shared? No.
• Inferences (profiles/preferences): Collected? No. Shared? No.
• Sensitive Personal Information: Collected? No (not expected). Limited/Used? No.

CHANGE LOG

v1.0 — Initial release of Privacy Policy for SneakerPing.