Privacy Policy

1. Information We Collect

We collect information you provide directly, such as your name, email, shipping and billing address, phone number, account credentials, and order details. We also collect technical information such as IP address, device data, and browsing events.

Through cookies and similar technologies, we and our partners (including Google) may collect online identifiers, usage data, ecommerce-related events (such as product and cart interactions), and data used for advertising measurement and personalization, as described in Section 4.

2. How We Use Information

We use personal information to process orders, provide customer support, manage accounts, prevent fraud, improve the website, and communicate order and service updates.

We use analytics to understand how visitors use our storefront (for example traffic, navigation, and completed purchases), to measure marketing effectiveness, and to improve our products and services. We also use Google's advertising-related technologies—subject to the consent signals described in Section 4—to deliver and measure ads, build remarketing audiences, and support ad personalization where permitted.

3. Payments and Financial Data

Payments are handled by third-party payment processors. We do not store full payment card numbers. Payment information is processed according to the payment processor's privacy practices and security controls.

4. Analytics, Cookies, and Similar Technologies

We use cookies, pixels, and similar technologies for essential site operation, security, preferences, analytics, and—where our consent settings allow—advertising and measurement through Google. Our primary analytics service is Google Analytics 4 (GA4), provided by Google LLC (and, where applicable, Google Ireland Limited). We may use Google Ads and related tags for conversion measurement, remarketing, and ad personalization consistent with Consent Mode signals described below. Google's Privacy Policy is available at policies.google.com/privacy. You can learn more about how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.

GA4 may set or read cookies (such as identifiers used to distinguish browsers) and receive information such as pages viewed, interactions, general location derived from IP address, device information, and ecommerce events (for example items viewed, cart changes, checkout steps, and completed orders). We configure the site so that some events are sent directly from our ecommerce servers to Google using Google's Measurement Protocol in addition to data collected in the browser. Server-sent events help keep order and revenue data consistent with our systems; they are not turned on or off by the same browser cookie settings as our storefront tag, though they relate to the same GA4 property if you have enabled analytics for our site.

We use Google Consent Mode to signal consent choices to Google for both analytics storage and advertising-related storage and personalization (including ad_storage, ad_user_data, and ad_personalization as Google defines those signals). When you accept non-essential cookies where we show a consent banner, that acceptance applies to analytics and to these advertising signals together, unless we separately offer a different choice on our site.

For most U.S. visitors, we currently operate analytics and these advertising signals consistent with disclosure in this policy (notice-based use). Where we enable an opt-in cookie banner (for example for certain regions or configurations), GA4 and ad-related uses may be limited until you accept; even then, Google may receive cookieless, aggregated, or modeled signals as described in Google's documentation for Consent Mode.

You can control cookies through your browser settings. Blocking or clearing cookies may affect site functionality and how we measure traffic.

We use Vercel Speed Insights, a real user monitoring (RUM) product from Vercel Inc., to collect performance metrics (such as Core Web Vitals and related timing signals), page URLs, and technical data from your browser or device (for example device type and connection characteristics) so we can measure and improve how quickly and reliably pages load. Speed Insights is separate from Google Analytics and is not controlled by our Google Consent Mode signals. For details on what Speed Insights collects and how Vercel handles it, see Vercel's Speed Insights privacy information and Vercel's Privacy Policy.

5. Third-Party Service Providers

We share information with trusted providers that support our operations, including payment processing, fraud prevention, hosting, and search or product discovery services. These providers may process data only as needed to perform services for us.

For website and commerce analytics and for advertising measurement and personalization, we use Google Analytics, Google Ads, and related Google services as described in Section 4. Information processed through Google's services may be used by Google in accordance with its policies, including for advertising, when our Consent Mode signals indicate that advertising storage and personalization are allowed.

6. Data Sharing and Disclosure

We may disclose information to comply with legal obligations, enforce our terms, protect rights and safety, or as part of a business transaction such as a merger or acquisition.

7. Data Retention

We retain personal information for as long as needed for the purposes described in this policy, including legal, accounting, tax, and dispute resolution requirements.

8. Your Privacy Choices

Depending on your location, you may have rights to access, correct, delete, or limit use of personal information. You can control cookies through your browser or device settings and, where we present one, our cookie consent tools.

For Google analytics and advertising technologies, Google offers controls such as browser add-ons and account settings; see Google's documentation for more information.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have rights to request: (a) disclosure of categories and specific pieces of personal information we collect, use, disclose, and share; (b) deletion of personal information, subject to legal exceptions; (c) correction of inaccurate personal information; and (d) limitation on certain uses of sensitive personal information where applicable. You may also have the right to opt out of certain "sales" or "sharing" of personal information, as those terms are defined by California law.

We do not discriminate against you for exercising privacy rights. To submit a California privacy request, contact us using the details in the Contact section below.

California law may treat certain disclosures of information to analytics or advertising partners as a "sale" or "sharing" for cross-context behavioral advertising. We describe our use of analytics in Section 4. If you wish to opt out of sales or sharing where applicable, use the contact method below (and any opt-out link we provide on our site footer if required by law at the time of your visit).

10. Security

We use administrative, technical, and physical safeguards intended to protect personal information. No method of transmission or storage is completely secure.

11. Children's Online Privacy (COPPA)

In line with the Children's Online Privacy Protection Act (COPPA), this website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, contact us and we will take appropriate steps to delete the information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes become effective when posted on this page.

13. Contact

For privacy questions or requests, contact us at contact@criterionbarrels.com or through our customer service page.