Privacy Policy
How we collect, use, and retain your information.
Information We Collect
We collect information you provide directly — such as your name, email address, shipping address, and payment details when you place an order or subscribe to Founders Circle — plus information collected automatically as you browse, including device/browser data, pages viewed, and approximate location (via IP address). We also collect information you submit through the site's contact form, newsletter signup, and sweepstakes entry (name, email, and, for mail-in entries, the details described in the Official Rules).
How We Use It
We use the information we collect to process and fulfill orders and subscriptions, communicate with you about your account or sweepstakes entry, operate the 7-Day Challenge and Founders Circle programs, run the US Open sweepstakes, improve the site's performance and content, and — where you've consented — for marketing and analytics purposes. We do not sell your personal information.
Cookies & Consent
This site uses a cookie consent banner, managed through Google Tag Manager, to collect and honor your cookie preferences. Before you provide consent, analytics and marketing cookies remain in a default-denied state (via Google's Consent Mode v2) — no analytics or advertising storage is set until you opt in through the consent banner. Essential cookies required for core site functionality (such as maintaining your shopping cart) are not gated by this consent mechanism, consistent with applicable law.
Analytics & Session Recording
With your consent, we use Google Tag Manager and Google Analytics 4 (GA4) to understand how visitors use the site — pages viewed, referral source, and on-site events such as viewing a product or adding to cart. With your consent, we also use Microsoft Clarity to record anonymized session replays and generate heatmaps, helping us identify usability issues. Clarity masks sensitive form fields by default.
Error Monitoring
We use Sentry to automatically capture technical errors (such as a broken page or failed request) so we can diagnose and fix them. Error reports may include technical context (browser, URL, stack trace) but are not used for marketing or advertising purposes.
If you sign up for our newsletter or email updates, we use Klaviyo to send you marketing and transactional email. Email marketing is being rolled out in phases as we launch; if you don't yet receive marketing email from us, your information is still held securely and used only as described in this policy. You can unsubscribe from marketing email at any time using the link in any email we send.
Payments & Orders
Checkout, payment processing, and order fulfillment are handled by Shopify, our commerce platform and payment processor. We do not store your full payment card details — Shopify and its payment partners process that information directly, subject to Shopify's own privacy and security practices.
Social Media
Our homepage displays a feed of our public Instagram posts, fetched server-side through the Instagram API. Because the feed is rendered on our server rather than embedded via a client-side widget, viewing it does not set third-party Instagram cookies or trackers in your browser.
Your Rights
Depending on where you live, you may have rights under laws such as the EU/UK GDPR, the California Consumer Privacy Act (CCPA), and other US state privacy laws to access, correct, delete, or receive a copy of your personal information, and to opt out of certain uses. To exercise these rights, contact us at the email below. We will verify your request and respond within the timeframe required by applicable law.
Data Retention
We retain personal information only as long as reasonably necessary for the purposes described in this policy, or as required by law. The windows below are provisional defaults pending confirmation by counsel and our processors' current account settings: • Shopify order & customer records — retained for the life of the account plus the period required for tax, accounting, and warranty purposes (provisional: 7 years). • Google Analytics 4 (GA4) event data — provisional: 14 months, GA4's configurable default, after which it is automatically deleted. • Microsoft Clarity session recordings and heatmaps — provisional: 30 days, per Clarity's default retention. • Sentry error and performance data — provisional: 90 days, per Sentry's default retention. • Klaviyo email and marketing profiles — retained until you unsubscribe or request deletion, or per Klaviyo's account-level retention settings. • Sweepstakes entry data (purchase and mail-in entries) — retained through the drawing, winner verification, and any legally required record-keeping period, then deleted, per the Official Rules. All windows above are provisional and subject to change; counsel and each processor's current default settings will confirm final figures before launch.
Contact Us
Questions about this Privacy Policy or your data? Email us at privacy@matchupmatcha.com or use the contact form on our Contact page. This policy is a pre-launch draft; its effective date will be confirmed once legal review is complete.