Privacy Policy

Introduction

Sports IoT LLC (“we,” “us,” or “our”), operating under the FanSync brand at fansync.net, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our products and services, and describes your rights — including rights under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).

Information We Collect

Personal Information

When you interact with our website or products, we may collect:

• Name and email address (when you contact us, and when you place an order)
• Shipping and billing information (when you make a purchase)
• Account credentials (if/when you create a fansync.net account)
• Team preferences and device settings

Device & Usage Information

FanSync devices and our website may automatically collect:

• Device connection status and firmware version
• WiFi network information (SSID only, not passwords)
• Usage patterns (celebration frequency, feature usage)
• Browser type, IP address, and pages visited on our website

Server Logs

Our servers automatically record standard log data — IP address, request time, the URL requested, and browser user-agent — for security and troubleshooting. These logs are purged within 30 days.

How We Use Your Information

• To provide, maintain, and improve our products and services
• To process transactions and fulfill and ship your orders
• To deliver real-time game data to your FanSync device
• To send transactional and service emails (order confirmations, shipping notifications, and account or support messages). We do not currently run a marketing newsletter or send promotional email.
• To respond to customer service requests and support needs
• To deliver firmware updates to your device

How We Share Information

We do not sell your personal information for money. We do share information with Meta for advertising measurement and audience targeting — the pages and products you view, the value of a purchase, and a scrambled (hashed) version of your email address. California law treats this as “sharing” for cross-context behavioral advertising. You can turn this off at any time — see Do Not Sell or Share My Personal Information. We otherwise share information only with the service providers (processors) we rely on to operate the business, each under their own privacy terms:

• Stripe, Inc. (United States) — payment processing. Privacy
• Shippo (Shippo, Inc.) (United States) — shipping rates and labels, and USPS for delivery. Shippo privacy · USPS privacy
• Resend, Inc. (United States) — transactional email delivery. Privacy
• Cloudflare, Inc. (United States) — bot protection (Turnstile) on our contact form. Privacy
• Meta Platforms, Inc. (United States) — advertising measurement and audience targeting on Facebook and Instagram. Data reaches Meta two ways: the Meta Pixel in your browser, which reports pages and products you view; and the Conversions API, where our own server reports completed purchases directly to Meta. Purchase reports include a scrambled (hashed) version of your email address — it cannot be read directly, but Meta can match it against its own account records. Both are switched off if you have opted out. Privacy
• Hetzner Online GmbH (European Union) — website and application hosting. Privacy

We may also disclose information where required by law or to protect our rights, safety, or property.

Cookies & Bot Protection

We use essential cookies needed for the site, your cart, and checkout to function. We also use the Meta Pixel, which sets advertising cookies used to measure our ads and show them to relevant audiences on Facebook and Instagram. We do not use third-party analytics tools such as Google Analytics.

Opting out covers both paths described above — the browser pixel and the purchase reports our server sends. Blocking scripts or cookies in your browser stops the first but not the second, which is why the opt-out below exists.

You can switch advertising cookies off at any time at Do Not Sell or Share My Personal Information, and we honor Global Privacy Control browser signals automatically as an opt-out request. Essential cookies are not affected by opting out — the cart and checkout need them to work.

Our contact form is protected by Cloudflare Turnstile, which sets a short-lived cookie and processes limited browser metadata to distinguish humans from bots. You can control cookies through your browser settings.

International Data Transfers

Our website and application are hosted by Hetzner within the European Union (Finland). Some of our processors (Stripe, Shippo, Resend, and Cloudflare) are located in the United States. Where personal data of individuals in the EEA or UK is transferred internationally, we rely on Standard Contractual Clauses or an equivalent lawful transfer mechanism.

Data Retention

We keep personal information only as long as needed for the purposes described above:

• Order and transaction records: up to 7 years, to meet tax and legal obligations
• Account data: until you close your account, plus a short grace period
• Contact form submissions: up to 2 years
• Server logs: purged within 30 days

Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), secure cloud infrastructure, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you
• Request correction or deletion of your personal information
• Request a copy of your data in a portable format
• Opt out of any marketing communications

EU & UK residents (GDPR)

In addition to the above, you may object to or request that we restrict certain processing, withdraw consent where processing is based on consent, and lodge a complaint with your local data protection supervisory authority.

California residents (CCPA/CPRA)

You have the right to know what personal information we collect and how we use it, to request deletion or correction, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell your personal information for money, but our use of the Meta Pixel is “sharing” under the CPRA — you can opt out at Do Not Sell or Share My Personal Information, and we honor Global Privacy Control signals automatically. We will not discriminate against you for exercising your rights.

How to exercise your rights

Submit a request through our contact form with a brief description of your request. We will respond within 30 days.

Children's Privacy

Our products and services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: our contact form

Sports IoT LLC — Washington State, USA