Legal Information

Effective Date: July 15, 2025

Introduction / Agreement to Terms: Welcome to HODL THE WHEY (“we,” “us,” or “our”). These Terms of Service (“Terms”) govern your access to and use of our website at hodlthewhey.io (the “Site”) and any related services we provide (collectively, the “Services”) in connection with our direct‐to‐consumer sales of whey protein products (“Products”). By creating an account, placing an order, or otherwise using the Site or Services, you expressly agree to be bound by these Terms. If you do not agree to all of these Terms, you must not access or use the Services.Please read these Terms carefully, as they affect your legal rights and obligations. We may update or revise these Terms from time to time at our sole discretion. When changes are made, we will post the revised Terms on the Site and update the “Last Updated” date. Your continued use of the Services after any such changes constitutes your acceptance of the new Terms. We encourage you to review this page periodically for any updates.If you have any questions about these Terms, please contact us through the contact form. Your decision to use our Site, register for an account, or place an order constitutes your acknowledgement that you have read, understood, and agreed to these Terms.

Definitions: For the purposes of these Terms, the word “Account” refers to the user profile you establish on our Site, encompassing your login credentials and any associated personal information. An “Affiliate” is any entity that, directly or indirectly, controls, is controlled by, or is under common control with HODL THE WHEY. When we speak of a “Customer,” “you,” or “your,” we mean the individual or organization that registers for an Account, places an Order, or otherwise accesses or uses the Services. An “Order” denotes the request you submit through the Site to purchase one or more Products. The term “Product” describes the whey protein powder and related goods sold under the HODL THE WHEY or HODL WHEY PROTEIN brands. “Services” encompasses the online storefront, ordering and payment processing systems, and all other functionalities provided via the Site. The “Site” itself is the hodlthewhey.io website, including all content, features, and navigational elements. When we refer to “Terms,” we mean this document as amended from time to time. Finally, a “Transaction” is the completed exchange of payment for Products, whether conducted on the Bitcoin blockchain or via the Lightning Network. Any capitalized term used in these Terms but not defined herein shall carry the meaning ascribed elsewhere in this agreement or, if undefined, its ordinary dictionary definition.

Service Provider & Contact Information: Our Services are provided by WeAreOnchain LLC, doing business as HODL THE WHEY. WeAreOnchain LLC is a limited liability company organized under the laws of the State of Wyoming, United States, with its principal place of business located at 30 N Gould St Ste N, Sheridan, WY 82801, United States. If you have any questions, concerns, or requests regarding these Terms or your use of our Site and Services, please contact us through the contact form. Our team strives to respond to all inquiries within two business days.

Eligibility: To be eligible to create an Account, place an Order, or otherwise use the Services, you must be at least eighteen (18) years of age (or the age of majority in your jurisdiction, if higher), a resident of one of the fifty United States or the District of Columbia, and possess the legal capacity to enter into binding contracts. By accessing the Site or placing an Order, you represent and warrant that you meet these requirements, that all information you provide is true and accurate, and that you will maintain and promptly update your Account information as necessary. If you do not meet these eligibility criteria, you must not access or use our Services.

Account Registration & Management: Account access is provided via Google’s Anonymous Authentication; you do not need to create a traditional login or remember a password. When you make a purchase, you will be prompted only to enter the shipping address required to fulfill your order. During the same browsing session, you may view your order status and tracking information directly on our Site. If your session expires or you clear your cookies, you can still retrieve your order details by entering your Bitcoin transaction hash or Lightning invoice (BOLT11) code into our tracking page. By using our anonymous authentication and transaction-based lookup, we minimize the personal data you must provide while ensuring you can always access your order and shipment information.

Ordering Procedure: When you are ready to purchase, simply select the desired quantity of whey protein and proceed to checkout. At that point, you will be asked to enter only the shipping address necessary for delivery—no account signup or password is required, as we use Google’s Anonymous Authentication. Once you submit your address, you will be presented with a Bitcoin payment request, either as a Lightning invoice (BOLT11) or an on-chain URI. After you complete the payment, we will confirm your order on screen and provide you with a transaction hash or Lightning invoice code. As long as your browser session remains active, you can revisit your order page to view real-time shipping status and tracking updates. If your session expires, you may still access your order details at any time by entering your transaction hash or BOLT11 code on our standalone tracking page. This streamlined process lets you place and monitor orders securely and privately, with minimal data entry.

Price, Availability & Right to Modify: All product prices are denominated in Bitcoin (measured in satoshis), while the per-ounce unit cost is displayed in U.S. Dollars (USD) on our Site. When you proceed to payment, your wallet will present both the required Bitcoin amount and its USD equivalent based on the live BTC/USD exchange rate we provide at checkout. Product availability depends on current stock levels at our Oklahoma fulfillment center and may change at any time without prior notice. We reserve the right to correct any pricing errors, to modify prices or availability, or to limit quantities before confirming your payment. If we are unable to honor the displayed price or fulfill your Order for any reason, we will cancel the transaction and promptly refund your Bitcoin payment in full.

Payment Terms: All purchases on our Site require payment exclusively in Bitcoin, which may be settled either on-chain via a standard Bitcoin URI or off-chain through a Lightning Network invoice (BOLT11). At checkout, we will generate a unique payment request showing the exact satoshi amount and its U.S. dollar equivalent based on the real-time BTC/USD exchange rate. You must complete the payment within the time window specified in the invoice—typically 15 minutes for Lightning invoices and 60 minutes for on-chain transactions—to guarantee the quoted amount; otherwise the request will expire and you will need to initiate a new payment. Network fees are not included in the product price and are the sole responsibility of the payer. Once we detect sufficient blockchain confirmations (one confirmation for Lightning payments, three confirmations for on-chain payments), your order is deemed paid, and we will send you an on-screen confirmation along with your transaction hash or invoice reference. If payment cannot be confirmed within 24 hours, or if there is any dispute in the transaction, we reserve the right to cancel the order and refund any received funds back to the originating Bitcoin address or Lightning channel. Any volatility between the time of invoice generation and payment settlement does not alter the amount owed; the Bitcoin amount is fixed at the moment the invoice is issued.

Disclaimer of Bitcoin Price Volatility: Because all Product prices are ultimately anchored to U.S. Dollars and converted into Bitcoin at the moment your payment request is issued, we cannot control fluctuations in the BTC/USD exchange rate that occur before you complete your transaction. By accepting these Terms and initiating payment, you acknowledge that you bear the full risk of any market volatility between invoice creation and settlement. In the event that exchange rate swings cause the Bitcoin amount you submit to fall below the required USD equivalent, we reserve the right to cancel or void the payment request and require you to generate a new invoice at the current exchange rate. Under no circumstances will HODL THE WHEY be held liable for gains or losses resulting from Bitcoin price movements.

Taxes, Duties & Fees: All Product prices include any applicable sales taxes (e.g. consumption-style taxes) but exclude shipping charges, which will be calculated and presented to you separately at checkout. You are responsible for any additional tax obligations—such as income, use, or import duties—imposed by your local jurisdiction. Because payments are settled in Bitcoin, you alone bear any network or miner fees incurred in processing your transaction; these fees are not reimbursable and are not included in the Product price or shipping charges.

Shipping Terms, Risk of Loss & Delays: We engage ViaCore Nutrition LLC to pick, pack and ship all orders from their Oklahoma fulfillment center, with shipments processed on Mondays, Tuesdays and Thursdays. Once your order departs the fulfillment facility, title and risk of loss transfer to you—even if the carrier retains possession—so please verify your shipping address carefully. We will provide you with tracking information on our Site (accessible via your session or transaction lookup) as soon as the carrier scans the package. While we strive to meet the scheduled processing days, actual delivery timing depends on the carrier’s transit performance and any customs or regulatory inspections; delays beyond our control may occur, in which case we will notify you via the tracking page. If your package is lost or damaged in transit after leaving the fulfillment center, you must pursue a claim with the carrier using the provided tracking number, although we will assist you in that process where possible.

Returns, Cancellations & Refunds: Because we manufacture and ship in small batches to maintain quality and freshness, all sales are final and we do not accept returns or order cancellations once payment has been confirmed. If you receive a Product that is defective or damaged, please contact us through the contact form within 7 days of delivery and provide photographic evidence of the issue. Upon verification, we will arrange shipment of a replacement Product at no additional charge; you do not need to return the original item. Refunds will not be issued except at our sole discretion in the event we are unable to supply a replacement. Any request submitted after the 7-day window or for reasons other than defects will not be honored.

Product Warranty, Health & Allergen Disclaimers: Our Products are produced under Good Manufacturing Practices (GMP) by our U.S. OEM partner and are warranted to be free from defects in materials and workmanship for a period of 30 days from the date of delivery. Except for defects as described in our Returns policy, we make no other warranty, express or implied, including any implied warranty of merchantability or fitness for a particular purpose. Because our whey protein is manufactured in a facility that also processes milk, soy, and tree nuts, the Product may contain trace amounts of these allergens. You acknowledge and agree to review all ingredient labels and to consult your physician if you have any concerns regarding dietary restrictions, allergies, or medical conditions. HODL THE WHEY shall not be liable for any adverse reactions resulting from consumption of our Products. Nutritional and health information provided on the Site or packaging is for general informational purposes only and does not constitute medical advice. If you have a medical condition or are pregnant or nursing, please seek professional medical guidance before using our Products.

Prohibited Uses: You agree not to use our Site or Services for any purpose that is unlawful, fraudulent, or prohibited by these Terms. You may not attempt to defraud HODL THE WHEY or any third party by submitting false or misleading information, tampering with payment processes, or engaging in “chargeback” abuse. You may not purchase Products for the purpose of resale, distribution, or any commercial use other than personal consumption. You may not use our Services to facilitate any activity that violates applicable laws or regulations—including, without limitation, money-laundering, terrorist financing, or any other criminal conduct. You may not reverse-engineer, decompile, or otherwise attempt to derive the source code or underlying structure of our Site, nor may you interfere with its security mechanisms or attempt to gain unauthorized access to any accounts, data, or systems. Any prohibited use may result in immediate termination of your access and legal action against you to the fullest extent permitted by law.

Intellectual Property Rights: All content on the Site—including text, graphics, logos, icons, images, audio clips, digital downloads, data compilations, and software—is the property of WeAreOnchain LLC or its licensors and is protected by United States and international copyright, trademark, and other intellectual property laws. All HODL THE WHEY names and logos, as well as product names, service marks, and slogans displayed on the Site, are our registered or unregistered trademarks. You are granted a limited, non-exclusive, non-transferable license to access and view the Site for your personal, non-commercial use only. Any other use, including reproduction, distribution, modification, public performance, or creation of derivative works, without our prior written consent, is strictly prohibited. Unauthorized use of the Site’s content may violate copyright, trademark, and other applicable laws, will result in termination of your rights under these Terms, and may subject you to legal liability.

User Submissions & Feedback: When you submit comments, questions, ideas, or other feedback through our Site or via email (collectively, “Feedback”), you grant WeAreOnchain LLC a perpetual, irrevocable, royalty-free, worldwide right to use, reproduce, modify, publish, distribute, and otherwise exploit that Feedback in any form or medium, without attribution or compensation to you. You represent and warrant that any Feedback you provide is your own original work, that you have the full right to grant us these rights, and that your Feedback does not infringe or violate any third party’s intellectual property, privacy, or other legal rights. We are not obligated to maintain the confidentiality of any Feedback and may freely use or incorporate it into our products, marketing materials, or Services without any obligation to you.

External Links & Third-Party Service Disclaimer: Our Site and Services may incorporate or link to functionality provided by third-party platforms, including ShipStation for order fulfillment and tracking, OpenNode for Bitcoin payment processing, Twilio for email form delivery, Firebase for data storage and user authentication, and Vercel for hosting and deployment. These integrations are provided “as-is,” and WeAreOnchain LLC does not control, endorse, or assume responsibility for the availability, privacy practices, security measures, or content of any third-party service. Your use of those services is subject to their own terms and policies, and you acknowledge that any issues arising from their performance, outages, or changes in functionality must be addressed directly with the respective provider. We shall not be liable for any loss or damage resulting from your reliance on, or inability to use, third-party services.

A/B Testing & Site Monitoring Notice: We employ A/B testing and site monitoring tools to continually improve your experience on the Site. With your consent to our cookies, we use Firebase Remote Config and Firebase Analytics to assign anonymous variant identifiers that control which version of a page or feature you see. All variant assignments and usage metrics are collected without any personally identifiable information, and the raw data is retained only for ninety (90) days for the sole purpose of analyzing performance and usability trends. At any time, you may opt out of this testing and tracking by adjusting your cookie preferences in the banner provided at the bottom of the Site; doing so will remove you from active experiments but will not affect your ability to place orders or use our Services. We do not share A/B test data with third parties or use it for any purposes beyond Site optimization.

Data Privacy, Cookies & Google Ads Opt-Out: We respect your privacy and handle your personal information in accordance with applicable data protection laws. When you visit the Site or use our Services, we collect only the data necessary to process your orders and improve your experience, such as your anonymous session identifier, shipping address, and transaction details. We use cookies and similar technologies to enable core site functionality (e.g., maintaining your anonymous session), to secure your interactions, and, with your consent, to serve and measure Google Ads campaigns. You may manage or revoke your cookie preferences at any time via the cookie banner; opting out of advertising cookies will prevent personalized Google Ads and remarketing but will not interfere with your ability to order or track shipments. We do not sell or rent your personal data to third parties, and we share information only with service providers—such as ShipStation, OpenNode, Twilio, Firebase, and Vercel—under strict contractual terms that require them to protect your data and use it solely to perform services on our behalf. All user data is retained only as long as necessary for transaction records, legal compliance, and Site optimization (no longer than 90 days for anonymous analytics data), after which it is securely deleted or anonymized.

Accessibility Statement: We are committed to ensuring that our Site is accessible to all users, including those with disabilities. To that end, we strive to adhere to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA and to follow best practices for inclusive design. We continually evaluate our Site’s structure, content, and functionality to improve usability—such as providing meaningful alternative text for images, ensuring sufficient color contrast, enabling keyboard navigation, and using semantic HTML. If you encounter any barriers that prevent you from fully accessing or using our Services, please contact us through the contact form with a description of the issue and your preferred format for receiving information, and we will make every reasonable effort to accommodate your needs.

Disclaimer of Warranties: THE SITE, SERVICES, PRODUCTS, AND ALL RELATED CONTENT ARE PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT ANY WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. TO THE MAXIMUM EXTENT PERMITTED BY LAW, HODL THE WHEY DISCLAIMS ALL WARRANTIES, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SITE OR SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF HARMFUL COMPONENTS, NOR DO WE GUARANTEE THE ACCURACY, COMPLETENESS, OR RELIABILITY OF ANY CONTENT OR INFORMATION PROVIDED. YOU ACKNOWLEDGE THAT YOUR USE OF THE SITE AND SERVICES IS AT YOUR SOLE RISK. NO ADVICE OR INFORMATION, WHETHER ORAL OR WRITTEN, OBTAINED FROM HODL THE WHEY OR THROUGH THE SITE SHALL CREATE ANY WARRANTY NOT EXPRESSLY STATED IN THESE TERMS.

Limitation of Liability: TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL WeAreOnchain LLC, HODL THE WHEY, ITS AFFILIATES, OR THEIR RESPECTIVE OFFICERS, DIRECTORS, EMPLOYEES OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES ARISING OUT OF OR RELATED TO THESE TERMS, THE SITE, THE SERVICES, OR THE PRODUCTS, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF DATA, LOSS OF REVENUE, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.YOUR SOLE AND EXCLUSIVE REMEDY FOR DISSATISFACTION WITH THE SITE, THE SERVICES OR THE PRODUCTS IS TO STOP USING THE SITE AND SERVICES AND, WHERE APPLICABLE, REQUEST A REPLACEMENT FOR DEFECTIVE PRODUCTS AS SET FORTH IN OUR RETURNS POLICY. IN NO EVENT SHALL OUR TOTAL AGGREGATE LIABILITY FOR ANY AND ALL CLAIMS ARISING FROM OR RELATING TO THESE TERMS, THE SITE, THE SERVICES, OR THE PRODUCTS EXCEED THE AMOUNT YOU ACTUALLY PAID IN BITCOIN FOR THE ORDER GIVING RISE TO THE CLAIM. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO CERTAIN OF THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU. IN SUCH CASES, OUR LIABILITY SHALL BE LIMITED TO THE MAXIMUM EXTENT PERMITTED BY LAW.

Indemnification: You agree to defend, indemnify, and hold harmless WeAreOnchain LLC, HODL THE WHEY, its Affiliates, and each of their officers, directors, employees, and agents (collectively, the “Indemnified Parties”) from and against any and all claims, liabilities, damages, losses, costs, or expenses (including reasonable attorneys’ fees) arising out of or relating to (a) your use of or conduct on the Site or through the Services, (b) your breach or alleged breach of these Terms, (c) your violation of any applicable law or third-party right, or (d) any Feedback or content you submit. You will cooperate fully in the defense of any claim. We reserve the right, at our own expense, to assume the exclusive defense and control of any matter subject to indemnification by you, and you agree not to settle any such matter without our prior written consent.

**Force Majeure: **Neither HODL THE WHEY nor you shall be liable for any failure or delay in performance of these Terms caused by circumstances beyond that party’s reasonable control, including acts of God, fire, flood, earthquake, war, terrorism, civil unrest, government action, labor disputes, pandemic, cyberattack, power failures, or Internet outages. In the event of a force majeure, the affected party shall notify the other as soon as practicable, and performance will be suspended for the duration of the force majeure event. If the event continues for more than sixty (60) days, either party may terminate the affected obligations without liability.

Governing Law & Jurisdiction: These Terms and any disputes arising out of or relating to them shall be governed by and construed in accordance with the laws of the State of Oklahoma, without regard to its conflict-of-law principles. You and HODL THE WHEY agree that any litigation or other action arising under these Terms shall be brought exclusively in the state or federal courts located in Oklahoma County, Oklahoma. Both you and HODL THE WHEY hereby submit to the personal jurisdiction and venue of those courts for any such dispute.

Arbitration Clause & Class Action Waiver: Any dispute, claim, or controversy arising out of or relating to these Terms, the Site, or the Services, including the formation, interpretation, breach, or termination thereof, shall be finally resolved by binding arbitration administered by the American Arbitration Association under its Consumer Arbitration Rules. The arbitration shall be conducted in Oklahoma City, Oklahoma, before a single neutral arbitrator, and judgment on the award may be entered in any court of competent jurisdiction. You and HODL THE WHEY each waive the right to a trial by jury and agree to resolve all claims in arbitration on an individual basis only. Neither you nor HODL THE WHEY may bring or participate in any class action, consolidated action, or representative proceeding. The arbitrator has no authority to hear any claims brought on a class, consolidated, or representative basis, and any such claims must be arbitrated individually. Notwithstanding the foregoing, you and HODL THE WHEY retain the right to bring individual claims in small claims court located in Oklahoma County, Oklahoma, provided the claim remains in that court and advances on an individual basis only. All arbitration proceedings and any award rendered shall remain confidential, except as may be necessary to confirm and enforce the award in a court of law.

Electronic Contract & Signature Consent (ESIGN): By clicking “I Agree,” submitting an Order, or otherwise interacting with the Site in a manner that indicates acceptance, you consent to the formation of a legally binding contract between you and HODL THE WHEY under the U.S. Electronic Signatures in Global and National Commerce Act (“ESIGN Act”) and similar state laws. You acknowledge that your electronic act of checking a box, clicking a button, or typing your name serves as your electronic signature, satisfying any requirement for a written signature and creating the same legal effect, validity, and enforceability as a handwritten signature. You further agree that HODL THE WHEY may provide you with notices, disclosures, records, or other communications in electronic form, and that such electronic communications satisfy any legal requirement that such communications be in writing. If you do not consent to this provision, you must not use the Site or place an Order.

Changes to the Terms: We may revise these Terms at any time in our sole discretion. When we do, we will post the updated Terms on the Site and update the “Last Updated” date at the top of the document. If we make material changes—such as altering dispute‐resolution procedures, modifying your rights, or substantially changing our business practices—we will provide you with at least fourteen (14) days’ notice prior to the new Terms taking effect, either by email to the address associated with your session or via a prominent banner on the Site. Your continued use of the Site or Services after the effective date of the updated Terms constitutes your acceptance of those changes. If you do not agree to the revised Terms, you must immediately cease using the Site and Services.

Severability: If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision will be deemed modified to the extent necessary to render it enforceable while maintaining its intent, or, if modification is not possible, it will be severed from these Terms. The remainder of the Terms will remain in full force and effect and will continue to be binding on you and HODL THE WHEY.

Termination & Suspension of Services: We reserve the right, at our sole discretion and without prior notice, to suspend or terminate your access to the Site and Services—including your ability to place Orders and view transaction information—if you breach these Terms, violate applicable law, or engage in any conduct that we reasonably believe may harm our business, reputation, or other users. Upon suspension or termination, all rights granted to you under these Terms will immediately cease, and you must promptly discontinue all use of the Site and Services. Any Sections of these Terms that by their nature survive termination—including Intellectual Property Rights, Disclaimer of Warranties, Limitation of Liability, Indemnification, Governing Law & Jurisdiction, and Arbitration—will remain in full force and effect. Termination or suspension will not relieve you of any obligations to pay amounts due for Orders placed prior to suspension or termination.

Notices & Contact Methods: All legal notices or other communications required or permitted under these Terms shall be in writing. We may deliver notices to you by posting them on the Site, by email to the address associated with your session, or by postal mail to the address you provide at checkout. Notices are deemed given one business day after posting on the Site or sending by email, or five business days after mailing. You agree that any such notices satisfy any legal requirement for written notice. To provide us with any notice under these Terms, please contact us through the contact form.

Effective Date: July 15, 2025

At HODL THE WHEY / HODL WHEY PROTEIN (“we,” “our,” or “us”), operated by WeAreOnchain LLC, we respect your privacy and are committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with our business activities.

This Policy applies to individuals in the United States and describes rights and choices under applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA/CPRA) and the Children’s Online Privacy Protection Act (COPPA).By engaging with us, you consent to the practices described in this Privacy Policy.

Scope: This Privacy Policy applies to all personal information collected, used, or shared by HODL THE WHEY / HODL WHEY PROTEIN in connection with the sale and fulfillment of products and related services within the United States.It covers information obtained through interactions with our online properties, communications, transactions, and advertising and analytics tools.This Policy does not apply to third-party websites or services that we do not control, even if linked from our platforms.

Information We Collect: We collect only the information necessary to operate our website, measure the effectiveness of our U.S.–only advertising, and process Bitcoin payments. For ad measurement, when you arrive from a Google ad (including YouTube Shorts), we collect advertising identifiers such as GCLID (where available) and, for iOS app-to-web traffic, WBRAID. We do not use cookies for this purpose. Instead, we generate a pseudonymous identifier using Firebase Anonymous Authentication and store only its mapping to GCLID/WBRAID in Google Cloud Firestore. For payments, we store the minimum transaction data required to verify and fulfill orders: the on-chain transaction ID (TXID) and the Lightning Network invoice (BOLT11) with related status timestamps. We do not collect email addresses, payment card details, or on-chain wallet/receiving addresses. We do not store IP addresses in our own systems; however, our service providers (e.g., hosting providers and Google) may process IP addresses as part of delivering their services, in accordance with their privacy policies.

How We Use Information: We use the information described above—subject to your settings and applicable law (including consent where required)—to attribute visits and purchases to our ads, measure and improve campaign performance, and optimize site reliability and user experience. Where appropriate, we may upload/report offline conversions to Google Ads using pseudonymous click identifiers (e.g., GCLID or WBRAID) together with limited event metadata (such as timestamp, value, currency, and order ID) to enable measurement and optimization without disclosing directly identifying information. In certain cases, we also use Enhanced Conversions to improve conversion measurement and bidding: first-party contact data (e.g., email address) is normalized and hashed with SHA-256 before transmission (or hashed locally by Google’s tag) so that Google receives only hashed (pseudonymous) values alongside limited event metadata. We do not sell personal information, and we do not permit third parties to use our measurement data (including hashed contact data) for their own independent advertising or profiling. We also use information to comply with legal obligations, enforce our terms, protect the security and integrity of our services, and detect, investigate, and prevent fraudulent or abusive activity.

Your Choices and Opt-Outs: You can manage Google ad personalisation at adssettings.google.com and you may use industry opt-out tools (such as those provided by the Network Advertising Initiative). If your browser sends a Global Privacy Control (GPC) or a similar signal, we will treat it as a request to opt out of ad personalisation and measurement to the extent required by applicable U.S. state privacy laws. Opting out will not affect essential processing needed to complete your Bitcoin payment (e.g., storing TXID or BOLT11), but it may limit our ability to understand which ads led to your visit or purchase.

Legal Basis for Processing: We process personal information as necessary to fulfill our contractual obligations to you (e.g., order confirmation, Bitcoin on-chain and Lightning Network payment verification, shipping, returns, and customer support), to comply with U.S. legal and regulatory requirements (such as tax reporting, anti-money laundering checks, OFAC sanctions screening, and lawful government or law enforcement requests), and based on our legitimate business interests (to operate, maintain, and improve our website and services; prevent fraud and secure our systems; conduct essential advertising and analytics; and ensure transaction integrity and security), and—where required by law or regulation, such as certain cookie technologies or direct marketing communications—on your consent (which you may withdraw at any time), and for users under age 13, only with verifiable parental consent in accordance with COPPA.

Sharing of Information: We may share personal information with service providers and subprocessors (e.g., payment processors, fulfillment centers, marketing and analytics platforms including Vercel Analytics) under confidentiality obligations to perform necessary functions; with government or law enforcement bodies to comply with legal requirements or enforce our policies; in connection with business transactions such as mergers, acquisitions, or asset sales; with your consent for purposes not otherwise described; and as aggregated or de-identified data that does not personally identify you. We do not sell personal information, and we do not “share” personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). If we ever change this practice, we will provide you with advance notice and a clear opportunity to opt out before any such sale or sharing takes place.

Cookies & Tracking Technologies: We do not use third-party cookies for our own purposes. We rely on first-party storage and Firebase-based tracking for essential site functionality and basic analytics, Vercel Analytics for performance monitoring and user-experience optimization, and Google Ads conversion-measurement tools. When our site loads third-party content or services—for example, embedded media (such as videos), analytics or ads tags, fraud-prevention or payment providers, content-delivery networks, or web fonts—those third parties may set their own cookies or use similar technologies (including localStorage, pixels, or device identifiers). These technologies are governed by the respective third party’s privacy policies; we do not have access to or control over them, and we do not read, combine, or repurpose their data with ours. Your controls. You can manage analytics and advertising measurement via your browser settings or the preference controls we provide. We plan to honor Global Privacy Control (GPC) and will update this notice once support is fully implemented.

Data Retention: We retain order and transaction records (including payment details) for at least 3 years to satisfy U.S. federal and state tax and accounting requirements (e.g., IRS regulations); customer support and inquiry data for up to 1 year; analytics and first-party tracking data for no more than 90 days before automatic deletion or irreversible de-identification (e.g., deletion of raw identifiers, replacement with non-reversible hashes); and performance analytics data (Vercel Analytics) for up to 30 days. We retain GCLID/WBRAID—and their link to our pseudonymous identifier—for up to 90 days from the associated ad click, consistent with Google’s offline conversion acceptance window, after which we delete the identifiers or replace them with an irreversibly de-identified form. Order, tax, and accounting records (including TXID/BOLT11 necessary to verify Bitcoin payments) are retained for as long as required by applicable law. Once retention periods expire, data is securely deleted or permanently anonymized to prevent re-identification.

SEO and Structured Data: We implement structured data markup (Schema.org) on our website to help search engines understand our content better. This structured data includes product information, pricing, availability, and FAQ content, but does not contain personal information about individual users.

Data Security Measures: We protect personal information with TLS encryption for all HTTP communications; physical security keys and Google Auth for administrative access control; Firestore security rules and management controls; and rate limiting and throttling to prevent abuse.

International Data Transfers: We store application and user data in Google Cloud Firestore configured for the United States region, so your information is primarily processed and stored in the United States. However, because we use global service providers (including hosting platforms, content delivery networks such as Vercel, analytics tools, authentication services, and payment processors), certain operations—such as backup, disaster recovery, content delivery via edge locations, technical support, fraud prevention, lawful compliance requests, or when you access our services from outside the U.S.—may involve temporary or limited transfers of your information to other countries where those providers or their subprocessors operate. When such transfers occur, we implement appropriate safeguards as required by applicable laws—such as Standard Contractual Clauses (where applicable), data minimization, encryption in transit and at rest, access controls, and audit logging—to ensure your information remains protected.

Your Rights & Choices: California residents may request disclosure, deletion, and opt out of the sale or sharing of their personal information without discrimination under CCPA/CPRA; residents of other U.S. states may have rights to access, correct, delete, or obtain a copy of their data and to opt out of targeted advertising; and for children under age 13, we collect personal information only with verifiable parental consent and limit collection to what is necessary in compliance with COPPA.

Accessibility Statement: We are committed to ensuring our website is accessible to all users by adhering to ADA standards and WCAG 2.1 Level AA guidelines and providing alternative methods of access upon request.

Changes to This Policy: We may update this Privacy Policy from time to time to reflect legal, operational, or technical changes; the revised version will be posted on our website with a new “Effective Date,” and your continued use of our services after that date constitutes your acceptance of the updated terms.

Regional Notice: Our services are intended for U.S. customers. If you access our site from the EEA, the UK, or Switzerland, we will obtain consent where required by law before using advertising identifiers for measurement.

Contact Information: For questions or requests regarding this Privacy Policy or your personal data, please contact us through the contact form.