Privacy Policy
Effective date: September 25, 2025
Website: https://thingswithstuff.llc
1. Introduction
Things With Stuff LLC (“we,” “us,” “our”) operates the website https://thingswithstuff.llc (the “Site”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or interact with the Site.
2. Information We Collect
| Type | Examples | How It’s Collected |
|---|---|---|
| Automatically collected data | IP address, browser/device identifiers, cookie IDs, pages visited, referral URL, timestamps | Via Google Tag Manager (GTM) and Google Analytics (GA) when you load a page |
| Voluntary data (if you submit a form) | Name, email address, phone number | When you voluntarily provide it through contact forms, newsletter sign‑ups, etc. |
3. Why We Use Your Information
| Purpose | Legal basis | Description |
|---|---|---|
| Website analytics | Legitimate business interest | To understand visitor behavior, improve site performance, and optimize content. |
| Security & troubleshooting | Legitimate business interest | To detect and prevent fraud, abuse, or technical issues. |
| Responding to inquiries / providing services | Consent (when you submit a form) or contract performance | To answer questions, send requested information, or fulfill services you request. |
4. Third‑Party Services
Google Tag Manager (GTM)
What it does: Loads and manages other tags (including GA) on the Site.
Data shared: Same data listed above (IP address, device/browser info, page URL, etc.) is sent to Google’s servers when GTM fires.
Google Analytics (GA)
What it does: Aggregates visitor interactions to produce traffic and usage reports.
Data shared: IP address (optionally anonymized), device/browser identifiers, pages viewed, timestamps, referral source, etc.
User controls: Visitors can opt out of GA tracking by disabling cookies in their browsers.
Data transfer: GA may process data on servers located outside the United States; we rely on Google’s standard privacy and security safeguards.
Cloudflare
What it does: Provides DNS resolution, CDN caching, DDoS protection, and web‑application firewall services for the Site.
Data shared: When you request a page, Cloudflare receives your IP address, request headers, and the URL you are accessing. Cloudflare also logs performance‑related data (latency, cache status, threat scores).
Purpose: To accelerate content delivery, protect the Site from malicious traffic, and ensure availability.
User controls: Users can limit Cloudflare tracking by adjusting their browser’s “Do Not Track” setting; Cloudflare respects standard Do Not Track signals where applicable.
Data retention: Cloudflare retains log data for a period defined in its own privacy policy (generally 30 days for raw logs, longer for aggregated analytics).
Links to provider privacy policies
• Google: https://policies.google.com/privacy
• Cloudflare: https://www.cloudflare.com/privacypolicy/
5. Cookies & Similar Technologies
- Essential cookies – Required for basic site operation (session ID, security tokens). Not used for tracking.
- Analytics cookies – Set by GTM/GA (
_ga,_gid, etc.) to measure usage. - Cookie lifespan – GA cookies typically persist for 2 years; session cookies expire when the browser closes.
Your choices: By continuing to browse the Site you consent to analytics cookies. You may disable them at any time via your browser settings or by installing the Google Analytics Opt‑out add‑on.
6. Data Retention
| Data type | Retention period |
|---|---|
| Analytics data (via GA) | Up to 14 months (configurable in GA). |
| Contact‑form submissions | 24 months (or until you request deletion). |
| Raw IP addresses (if not anonymized) | 30 days. |
7. Your Rights & Choices
- Access & correction: You may request a copy of the personal data we hold about you and ask that inaccurate information be corrected.
- Deletion: You may ask us to delete your personal data, except where we must retain it for legitimate business or legal reasons.
- Opt‑out of analytics: As noted in Section 5, you can block analytics cookies or use Google’s opt‑out add‑on.
8. Security
We employ reasonable technical and organizational measures to protect your data, including:
- TLS encryption for data in transit.
- Access controls and role‑based permissions for staff.
- Regular software updates and vulnerability scans.
While we strive to protect your information, no system can guarantee absolute security.
9. Children’s Privacy
Our Site is not directed at children under 13 years of age, and we do not knowingly collect personal information from minors. If you believe we have inadvertently obtained such data, please contact us so we can delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated “Effective date.” Continued use of the Site after changes constitutes acceptance of the revised policy.