Privacy Policy

Introduction

Sports IoT LLC (“we,” “us,” or “our”), operating under the FanSync brand at fansync.net, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our products and services, and describes your rights — including rights under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).

Information We Collect

Personal Information

When you interact with our website or products, we may collect:

• Name and email address (when you contact us)
• Shipping and billing information (when you make a purchase)
• Account credentials (if/when you create a fansync.net account)
• Team preferences and device settings

Device & Usage Information

FanSync devices and our website may automatically collect:

• Device connection status and firmware version
• WiFi network information (SSID only, not passwords)
• Usage patterns (celebration frequency, feature usage)
• Browser type, IP address, and pages visited on our website

Server Logs

Our servers automatically record standard log data — IP address, request time, the URL requested, and browser user-agent — for security and troubleshooting. These logs are purged within 30 days.

How We Use Your Information

• To provide, maintain, and improve our products and services
• To process transactions and fulfill and ship your orders
• To deliver real-time game data to your FanSync device
• To send transactional and service emails (order confirmations, shipping notifications, and account or support messages). We do not currently run a marketing newsletter or send promotional email.
• To respond to customer service requests and support needs
• To deliver firmware updates to your device

How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with the service providers (processors) we rely on to operate the business, each under their own privacy terms:

• Stripe, Inc. (United States) — payment processing. Privacy
• Shippo (Shippo, Inc.) (United States) — shipping rates and labels, and USPS for delivery. Shippo privacy · USPS privacy
• Resend, Inc. (United States) — transactional email delivery. Privacy
• Cloudflare, Inc. (United States) — bot protection (Turnstile) on our contact form. Privacy
• Hetzner Online GmbH (European Union) — website and application hosting. Privacy

We may also disclose information where required by law or to protect our rights, safety, or property.

Cookies & Bot Protection

We use only essential cookies needed for the site, your cart, and checkout to function. We do not use advertising, tracking, or third-party analytics cookies, so no cookie-consent banner is required.

Our contact form is protected by Cloudflare Turnstile, which sets a short-lived cookie and processes limited browser metadata to distinguish humans from bots. You can control cookies through your browser settings.

International Data Transfers

Our website and application are hosted by Hetzner within the European Union (Finland). Some of our processors (Stripe, Shippo, Resend, and Cloudflare) are located in the United States. Where personal data of individuals in the EEA or UK is transferred internationally, we rely on Standard Contractual Clauses or an equivalent lawful transfer mechanism.

Data Retention

We keep personal information only as long as needed for the purposes described above:

• Order and transaction records: up to 7 years, to meet tax and legal obligations
• Account data: until you close your account, plus a short grace period
• Contact form submissions: up to 2 years
• Server logs: purged within 30 days

Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), secure cloud infrastructure, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you
• Request correction or deletion of your personal information
• Request a copy of your data in a portable format
• Opt out of any marketing communications

EU & UK residents (GDPR)

In addition to the above, you may object to or request that we restrict certain processing, withdraw consent where processing is based on consent, and lodge a complaint with your local data protection supervisory authority.

California residents (CCPA/CPRA)

You have the right to know what personal information we collect and how we use it, to request deletion or correction, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell or share your personal information, and we will not discriminate against you for exercising your rights.

How to exercise your rights

Submit a request through our contact form with a brief description of your request. We will respond within 30 days.

Children's Privacy

Our products and services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: our contact form

Sports IoT LLC — Washington State, USA