Privacy
Policy

We collect information from you when you register on our site, place an order, subscribe to our newsletter, fill out a form, or visit our website.

When registering or ordering on our site, you may be asked to provide your name, email address, mailing address, physical address, phone number, university name, graduation year, and payment information. You may also visit our site anonymously.

We also automatically collect certain information when you visit our website, including your IP address, browser type, device information, pages visited, time spent on pages, and actions taken on our site (such as button clicks and form submissions), including recordings of how you use our pages (see PostHog below).

Any information we collect from you may be used for:

• •Personalizing your experience.
• •Improving our website and customer service.
• •Processing transactions.
• •Sending periodic updates, including order details, service updates, and promotional materials.
• •Measuring and analyzing website performance and user engagement.
• •Displaying targeted advertisements on third-party platforms.

You may unsubscribe from emails using the instructions provided in each message or reply "STOP" to texts.

We use third-party analytics and advertising tools to understand how visitors use our website and to deliver targeted advertisements. These tools collect information about your browsing behavior.

Google Analytics

We use Google Analytics to analyze website traffic and user behavior. Google Analytics collects information such as:

• •Your IP address (anonymized)
• •Pages you visit and time spent on each page
• •How you arrived at our site (referral source)
• •Your browser type and device information
• •Actions you take on our site (button clicks, form submissions)

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Meta (Facebook) Pixel

We use Meta Pixel (formerly Facebook Pixel) to measure the effectiveness of our advertising, understand user actions on our website, and deliver targeted advertisements on Facebook and Instagram. Meta Pixel collects information such as:

• •Pages you visit on our website
• •Actions you take (such as signing up or completing a purchase)
• •Your IP address and browser information
• •Information from cookies placed by Meta

This information may be used to show you personalized ads on Meta platforms. You can manage your ad preferences in your Facebook Ad Settings or opt out of interest-based advertising through the Digital Advertising Alliance.

Snap Pixel

We use the Snap Pixel to measure the effectiveness of our advertising on Snapchat and to deliver relevant ads there. The Snap Pixel collects information such as:

• •Pages you visit on our website
• •Actions you take (such as signing up or completing a purchase)
• •Your IP address and browser information
• •Information from cookies placed by Snap

This information may be used to show you personalized ads on Snapchat. You can manage your ad preferences in your Snapchat Ad Preferences or opt out of interest-based advertising through the Digital Advertising Alliance.

TikTok Pixel

We use the TikTok Pixel to measure the effectiveness of our advertising on TikTok and to deliver relevant ads there. The TikTok Pixel collects information such as:

• •Pages you visit on our website
• •Actions you take (such as signing up or completing a purchase)
• •Your IP address and browser information
• •Information from cookies placed by TikTok

This information may be used to show you personalized ads on TikTok. You can manage your ad preferences in your TikTok ad settings or opt out of interest-based advertising through the Digital Advertising Alliance.

PostHog (Product Analytics and Session Recordings)

We use PostHog, a product-analytics and session-recording service, to understand how visitors use our website so we can improve it. PostHog collects information such as:

• •Pages you view, and the website or ad that brought you to our site
• •Clicks, scrolls, and other interactions (for example, repeated clicks on something that isn't responding), which we also use to build heatmaps
• •Your device type, browser, operating system, and screen size
• •Your approximate location (city, region, and country)
• •If you are logged in, an internal account identifier and your account type (student or parent). We do not send your name, email, or phone number to PostHog.
• •Conversion events sent from our own servers, such as submitting a form or paying a reservation (including the order number and amount)

We have turned off IP-address storage in PostHog: your IP address is used to estimate the approximate location above and is then discarded rather than stored.

PostHog also records how visitors move through our website — mouse movement, clicks, scrolling, and navigation — so we can replay those sessions and find where the site is confusing. What you type into forms is always hidden, and on-screen text is hidden by default except for our own website text on public pages (such as our home, pricing, and sign-up pages); photos of your items are blocked. We do not record network traffic, browser consoles, or canvas content.

PostHog acts as our service provider (processor) under a signed data-processing agreement and stores this data in the United States. We use PostHog only to understand and improve our website and the effectiveness of our marketing. PostHog data is never used to target or show you ads, and we do not sell it or share it for advertising.

If your browser sends a "Do Not Track" (DNT) or Global Privacy Control (GPC) signal, PostHog does not collect analytics events or session recordings from you, and our servers do not send it any events about you. See our California Online Privacy Protection Act section below.

Customer Relationship Management (CRM)

We use third-party CRM services to manage customer communications and follow up with users who have shown interest in our services. If you begin filling out a form on our website but do not complete it, we may collect and store the information you entered to follow up with you about our services.

We use cookies and similar tracking technologies to collect information about your browsing activity. Cookies are small text files stored on your device that help us improve your experience.

Types of cookies we use:

• •Essential Cookies: Required for basic website functionality, such as maintaining your login session and remembering items in your cart.
• •Analytics Cookies: Help us understand how visitors interact with our website by collecting information about pages visited, time spent, and user behavior. We use Google Analytics and PostHog for this purpose. PostHog sets a first-party cookie on our own domain that expires one year after your last visit.
• •Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. We use the Meta Pixel, Snap Pixel, and TikTok Pixel for this purpose.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking certain cookies may impact website functionality.

We implement security measures to protect your personal information when placing an order or entering your details.

Sensitive payment data is encrypted through our payment gateway (via Stripe). Your private payment information is not stored on our servers after the transaction is complete.

We do not sell your personal information. However, we share information with the following categories of third parties:

• •Service Providers: Companies that help us operate our business, such as payment processors (Stripe), email service providers, and customer support tools.
• •Analytics Partners: Google Analytics receives anonymized data about website usage to help us improve our services. PostHog, our product-analytics and session-recording provider, processes website-usage data on our behalf as a service provider (processor) under a data-processing agreement.
• •Advertising Partners: Meta (Facebook/Instagram), Snap (Snapchat), and TikTok receive information about your website activity to help us deliver targeted advertisements. Under California law (CCPA/CPRA), this may be considered "sharing" of personal information for cross-context behavioral advertising.

We may also disclose information when required by law or to protect rights, property, or safety.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• •Right to Know: You can request information about the personal data we collect, use, and share.
• •Right to Delete: You can request that we delete your personal information, subject to certain exceptions.
• •Right to Opt-Out of Sharing: You can opt out of the sharing of your personal information for cross-context behavioral advertising (targeted ads).
• •Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Do Not Sell or Share My Personal Information:We do not sell your personal information for monetary consideration. However, our use of advertising cookies (such as Meta Pixel) may be considered "sharing" under CPRA. To opt out of this sharing:

• •Adjust your cookie preferences in your browser settings
• •Use the opt-out links provided in the Analytics and Advertising section above
• •Contact us at collegecubbies@getacubby.com with your request

To exercise any of these rights, please contact us at collegecubbies@getacubby.com. We will respond to verifiable requests within 45 days.

Our website may include links to third-party services. These entities have independent privacy policies. We are not responsible for their content or privacy practices.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

• •Account Information: Retained while your account is active and for up to 3 years after your last order for customer service and legal purposes.
• •Transaction Records: Retained for 7 years to comply with tax and legal requirements.
• •Analytics Data: Aggregated analytics data may be retained indefinitely. Individual user data from Google Analytics is retained for 14 months. PostHog analytics events are retained for 1 year and session recordings for 30 days. The basic profile PostHog keeps for logged-in users (such as your account identifier and account type) is kept until deleted; you can ask us to delete it at any time.

We comply with CalOPPA. In accordance with CalOPPA, we agree to the following:

• •Users can visit our site anonymously.
• •We include a link to this Privacy Policy on our homepage and on every page where personal information is collected.
• •Users will be notified of any privacy policy changes on this page.
• •Registered users can update their personal information by logging into their account.
• •Do Not Track: Our product-analytics and session-recording provider (PostHog) honors browser "Do Not Track" (DNT) and Global Privacy Control (GPC) signals — when your browser sends one, PostHog collects no analytics, recordings, or server-side events from you. Our other analytics and advertising tools, such as Google Analytics and the Meta Pixel, do not currently respond to DNT signals.
• •Third-Party Tracking: Third parties such as Meta, Snapchat, and TikTok may collect information about your activity over time and across different websites when you use our site.

We do not knowingly collect data from individuals under 13 years old. Our services are intended for college students and their families, typically aged 18 and above. If we become aware that we have collected personal information from a child under 13, we will delete that information promptly.

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• •Email: collegecubbies@getacubby.com
• •Phone: (619) 975-4677