Privacy Policy

Tannen Climbing ("we," "us," or "our") operates the tannenclimbing.com website. This Privacy Policy explains what information we collect, how we use it, and what choices you have. We've written this in plain language because we believe privacy policies should be readable, not just legally defensible.

Information We Collect

Account Information

When you create an account, we collect your name, email address, and a password. Your password is never stored in plain text — we use a secure one-way hash so that even we cannot read it.

Order Data

When you place an order, we collect your shipping address and order details. Payment information (credit card numbers, billing address) is processed directly by Stripe and is never stored on our servers. We receive only a confirmation that your payment was successful.

Browsing Data

We use cookies and browser local storage to keep your shopping cart intact between visits and to maintain your login session. We do not use third-party tracking cookies or analytics platforms that follow you across the web.

Newsletter

If you sign up for our newsletter, we collect your email address. You can unsubscribe at any time using the link in every email we send.

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including coordinating production through our print-on-demand partner Printify
• Send transactional emails — order confirmations, shipping updates, and account notifications — via our email provider Resend
• Maintain your account and shopping cart across sessions
• Improve our website and customer experience
• Send marketing emails if you have opted in (you can opt out at any time)

Third-Party Services

We work with a small number of trusted services to run our store. Each has access only to the information they need to perform their specific role:

Cookies & Local Storage

We use a minimal set of cookies and browser storage to make the site work properly. Here is exactly what we store:

We do not use advertising cookies, social media tracking pixels, or third-party analytics. All cookies we set are strictly necessary for the site to function.

Data Retention

We keep your information only as long as we need it:

• Account data is retained while your account is active. You can request deletion at any time.
• Order records are kept for 7 years to comply with tax and accounting requirements.
• Cart sessions expire after 30 days of inactivity.
• Newsletter subscriptions are retained until you unsubscribe.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct any inaccurate information in your account
• Delete your account and personal data (order records may be retained for legal obligations)
• Export your data in a portable format
• Opt out of marketing emails at any time via the unsubscribe link or your account settings

Data Security

We take the security of your data seriously and employ industry-standard measures to protect it:

• All connections to our site are encrypted via HTTPS/TLS
• Passwords are hashed using PBKDF2-SHA256 with 100,000 iterations — even in the unlikely event of a data breach, your password cannot be read
• Authentication sessions use signed JWT tokens with expiration times
• Payment data is handled entirely by Stripe and never touches our servers
• Our site is hosted on Cloudflare's global network, which provides DDoS protection and edge security

While no system is perfectly secure, we continuously review and improve our security practices to protect your information.

Children's Privacy

Our site and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at [email protected] and we will promptly delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of our site after changes are posted constitutes acceptance of the updated policy.