Privacy Policy

Launch signup: email, your consent, the date, the signup source; once enabled, the consent wording you saw, an optional marketing opt-in, campaign (UTM) tags, and the referring page — when you join the "notify me" list.

Orders: name, email, shipping address, phone (optional), items, order history — when you buy.

Payment: handled by Stripe; we get only the card brand, last 4 digits and payment status — at checkout.

Account (optional): email, password (stored hashed by our auth provider), addresses, wishlist — if you create an account.

Support: your messages and photos of damaged items — when you contact us.

Device and usage: IP address, browser, pages viewed, approximate location, cookies and pixel events — when you browse.

We do not knowingly collect information from children under 13.

To take and fulfil orders, send order and shipping updates, answer support requests, prevent fraud, and improve the Site. We send launch and marketing emails only if you agreed.

We email you only if you signed up and ticked the consent box. Launch signups get the launch announcement, and marketing emails go only to people who opted into them.

Every marketing email includes a way to unsubscribe — reply "unsubscribe" or use the link where provided. We honour opt-outs within 10 business days (CAN-SPAM). You can also email the privacy address below.

Order and shipping emails still arrive after you unsubscribe from marketing.

We do not sell your personal information for money. We share it only with service providers who help us run the store:

Launch signup list: a database server we operate (behind access controls). The signup form can only add entries; only our team can read them.

Store database and accounts: a database server we operate (when the store is connected).

Stripe (when checkout is enabled): payment processing, fraud prevention, and sales tax calculation and collection at checkout (stripe.com/privacy).

Printify and its print providers (when fulfillment is enabled): print and ship orders using your name, shipping address and items (printify.com/privacy-policy).

Printful and its print partners (when used for an item): print and ship using your name, shipping address and items (printful.com/privacy).

Resend (when email sending is enabled): transactional and marketing email delivery.

Vercel: site hosting.

Vercel Analytics (when enabled): aggregated page views and performance metrics.

Sentry (when enabled): error monitoring.

Meta Pixel and TikTok Pixel (when enabled): advertising and conversion measurement.

We also disclose information when the law requires it, or to protect our rights or prevent fraud.

We use cookies the Site needs to work (cart, login) and, if enabled, analytics and advertising cookies and pixels. Where required, a cookie notice lets you decline the non-essential ones. Your browser can also block cookies.

Launch signups: until you unsubscribe, or 24 months with no engagement.

Orders: 7 years for tax records.

Support messages: 2 years.

Depending on where you live, you can: know and access the personal information we hold about you; correct it; delete it; get a portable copy; opt out of "sale" or "sharing" for cross-context behavioural ads; limit the use of sensitive information (we do not collect any); and not be discriminated against for using these rights.

If ad pixels are enabled, California may treat that as "sharing". You can opt out by emailing hello@stupidmerchandshit.com or visiting https://stupidmerchandshit.com/privacy.

To make a request, email hello@stupidmerchandshit.com with the subject "Privacy request". We verify you by matching your email and order details, and respond within 45 days. An authorised agent can make a request for you with written permission. If we deny your request, you can appeal by replying to our decision. We extend these rights to all US customers, whether or not the law requires it for a business our size.

Encryption in transit, access controls, insert-only keys for the signup form, and no stored card data. No system is perfectly secure.

We will post updates here with a new date. If you are on our list, we will email you about material changes.

stupidmerchandshit, a DBA of Scuffed Clothing Company LLC, 1309 Coffeen Ave STE 1200, Sheridan, WY 82801, hello@stupidmerchandshit.com