What we know, what we don't.

Marketing infrastructure is paused.

As of the date below, our marketing and analytics tooling — email automation (Klaviyo), site analytics (Google Analytics), and advertising pixels (Facebook, Pinterest) — is turned off. The rebuild we're shipping today doesn't actively collect tracking data through any of those services.

When we reactivate marketing infrastructure (likely tied to a future product launch), we'll update this policy before turning the tooling back on, and we'll show a cookie consent banner where required by your jurisdiction. The version of this page you're reading is honest about today, not aspirational about a future state.

Order and support data only.

When you place an order or contact us, we collect:

• Order data through Shopify — your name, email, shipping address, billing address, items purchased, and payment confirmation. Shopify handles the actual payment card data; we don't see or store your card details.
• Customer support emails — anything you write to support@strongerthanyesterday.com, plus our reply, kept in our inbox.
• Phone number — only if you choose to give it on a form. We don't require it.
• Account data through Shopify — if you create an account, Shopify stores your account profile. The rebuild itself uses guest checkout; account creation and management happen on the Shopify side.

We don't actively collect browsing data, location data, or behavioral analytics on the rebuild today. See the "Current state" note above.

As few as we can.

A small number of third-party services see your data because they're necessary to fulfill your order:

• Shopify — processes your payment, stores order records, and provides the checkout experience. Shopify is the primary processor of customer data we hold.
• Cloudflare — serves the website. Cloudflare can see HTTP request metadata (IP address, user agent, page URL) at the edge for security and performance purposes. They do not see order or payment data.
• USPS — receives your shipping address (and only your shipping address) when we generate a shipping label.
• Namecheap Private Email — hosts the support@strongerthanyesterday.com inbox. As the email provider, Namecheap has access to inbound and outbound email content as part of normal email operation.

We don't sell your data. We don't share it with advertising networks. When marketing infrastructure is reactivated, we'll add the relevant providers to this list before turning anything on.

Functional cookies only.

The rebuild today uses cookies and similar local storage only for:

• Session and cart state — keeping your cart, wishlist, and recently-viewed items between page loads. Stored in your browser's localStorage.
• Shopify checkout session — when you transition from cart to checkout, Shopify sets its own cookies for the checkout flow.

No advertising cookies, no behavioral-tracking cookies, no third-party analytics cookies are set by the rebuild today. We have not deployed a cookie consent banner because there's nothing for the customer to consent to or refuse beyond what's strictly necessary for the site and checkout to function.

Your data is processed in the United States.

STY is operated from the United States, and our service providers (Shopify, Cloudflare, USPS, Namecheap Private Email) primarily process data on US infrastructure. If you're shopping from outside the US, your order data will be transferred to and processed in the US.

By placing an order or contacting us, you consent to this international transfer.

Access, correct, delete.

If you're in the European Union or the United Kingdom, the GDPR or UK GDPR gives you specific rights over the personal data we hold:

• Right of access — ask us what data we hold about you, and we'll send you a copy.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data (subject to legitimate business or legal retention needs, like tax records on completed orders).
• Right to restrict processing — ask us to limit how we use your data while a question is being resolved.
• Right to data portability — ask for your data in a machine-readable format.
• Right to object — including the right to opt out of marketing once we reactivate marketing infrastructure.
• Right to lodge a complaint — with your country's data protection authority if you believe we've handled your data improperly.

To exercise any of these rights, write to support@strongerthanyesterday.com with "Privacy" in the subject line. We'll respond within 30 days.

Know, delete, opt out of sale.

If you're a California resident, the California Consumer Privacy Act (and its CPRA amendments) give you these rights:

• Right to know — what categories and specific pieces of personal information we've collected about you, where it came from, and what we did with it.
• Right to delete — ask us to delete personal information we've collected.
• Right to correct — ask us to fix inaccurate personal information.
• Right to opt out of sale or sharing — STY does not sell personal information and does not share it for cross-context behavioral advertising. There is nothing to opt out of today; if that ever changes, we'll provide a "Do Not Sell or Share My Personal Information" link before any such activity begins.
• Right to limit use of sensitive personal information — STY does not collect or process sensitive personal information beyond what's strictly necessary for fulfilling your order.
• Right to non-discrimination — exercising any of the above rights does not change the price or quality of the services you receive from us.

To exercise these rights, write to support@strongerthanyesterday.com with "Privacy" in the subject line.

Indefinite, with deletion on request.

Order records and customer support emails are retained indefinitely by default. We don't have a fixed deletion schedule because order history is genuinely useful to keep — for warranty questions, exchange tracking, customer-service context.

If you'd rather we delete your data sooner, write to us. We honor deletion requests under GDPR, UK GDPR, and CCPA as described above. Some records (tax-relevant order data) we may need to retain for the period required by US tax law even after a deletion request, but we'll tell you what's being kept and why.

Self-serve via your account.

If you have a Shopify account with STY, Shopify provides built-in data-access and data-deletion controls. From your Shopify account(opens on strongerthanyesterday.com), you can request a copy of your data or request account deletion at any time. You can also write to us directly and we'll process the request on your behalf.

We don't knowingly collect from children.

STY's products are intended for adults, and we don't knowingly collect personal information from anyone under 13 (or under 16 in jurisdictions where that's the age threshold). If you're a parent or guardian and you believe a child has provided us with personal information, write to us and we'll delete it.

Updated when practice changes.

This policy reflects our current operational practice. When that practice changes — most notably when we reactivate marketing infrastructure — we update this page and bump the "last updated" date below. For changes that affect how your data is handled (new third-party processor, new category of data collected, change in retention), we notify customers on file by email before the change takes effect.

Write to us.

For any privacy question — data access, deletion, correction, complaints, or anything else covered above — write to support@strongerthanyesterday.com with "Privacy" in the subject line. We respond directly.