Privacy
Policy

1. Overview

Cinder Labs takes a minimal approach to data collection. We collect only what we need to provide and bill for our services. We do not sell your data.

2. Information We Collect

From customers (people who purchase a site):

• Name and email address, provided at checkout
• Payment information, processed and stored by Stripe (we never see or store your full card number)
• Business information you provide for your website (text, photos, business name, contact details)

From visitors to cinderlabs.co:

• Aggregate, anonymized traffic data via Cloudflare Web Analytics (page views, referrer, country). This tool does not use cookies and does not collect personally identifiable information.

We do not run advertising trackers, pixel tags, or third-party analytics that collect personal data.

3. How We Use Your Information

We use your information to:

• Deliver and manage your website and subscription
• Process payments via Stripe
• Communicate with you about your site, updates, and billing
• Respond to support requests

We do not use your information for advertising or share it with data brokers.

4. Third-Party Services

We share limited data with the following third parties as necessary to operate:

• Stripe — payment processing. Stripe stores your payment method and billing information. See Stripe's Privacy Policy.
• Cloudflare — website hosting, CDN, anonymized traffic analytics, and contact form intake. Contact form submissions are received by a Cloudflare Worker that we operate on our own domain; the worker passes the submission to our email delivery provider and does not retain it. See Cloudflare's Privacy Policy.
• Resend — transactional email delivery. When a visitor submits a contact form, their name, email, message, and any other fields they entered are transmitted through Resend to the business owner's inbox. Resend retains the email content briefly for delivery and operational logging. See Resend's Privacy Policy.

Contact forms are included with most sites where applicable. We do not store form submission data ourselves.

We do not use any other third-party services that receive your personal data.

5. Data Retention

We retain customer account information for as long as your subscription is active and for up to 3 years after cancellation, for tax and legal record-keeping purposes. You may request deletion of your data at any time (see Section 7).

6. Security

We take reasonable precautions to protect your data. Payments are handled entirely by Stripe over encrypted connections. We do not store payment card data.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights

You may contact us at any time to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to any legal retention obligations)

To make a request, email cinderlabsco@gmail.com. We will respond within 30 days.

8. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email at least 14 days before they take effect.

10. Contact

Spenser Lea d/b/a Cinder Labs
cinderlabsco@gmail.com
Bend, OR