Privacy Policy

Last updated: Oct 22, 2026

Shirt-Tucker.com ("we," "us," or "our") is operated by Kinor LLC, a California limited liability company, under the Cadenza brand. Shirt-Tucker is a Cadenza product. Our mailing address is PO Box 67, Agoura Hills, CA 91376. This policy explains what personal information we collect, how we use it, who receives it, and the choices you have.

1. Personal information we collect

Information you give us:

Orders. Name, email address, shipping address, and phone number if you provide one at checkout. You enter your card on Stripe's page. We do not store your card number.
Email. If you join the list, register a warranty, or write to us.
Messages. What you send through the contact form or by email. The contact form is delivered with EmailJS.
Warranty registration. Name, email, belt color, order number, and purchase date, if you send them. Registration confirms the 12-month limited warranty. It is not required for the warranty to apply.

Information collected while you browse:

Device and usage data. Pages viewed, approximate time on a page, the referring URL, browser type, and device information.
Cookies and on-device storage. Used for affiliate referrals, promo codes, a first-party note of how you arrived (ad click ids and campaign names, stored on your device), and your privacy choice on this browser.

We do not buy personal information from data brokers. After you pay, Stripe sends us the details we need to ship the order, such as your name, email, and shipping address.

2. Tracking technologies on this site

This is the list of tools the website code loads. Paid ads are paused. The advertising code is still on the pages and still runs unless you opt out or your browser sends Global Privacy Control.

Google Analytics 4 (measurement ID G-432NTRXD55), through the Google tag. This is site analytics.
Google Tag Manager (container GTM-T5PW2KFC). A container for tags. In this site's setup it is used for analytics. The site code does not load a separate Google Ads conversion pixel.
Meta Pixel (dataset 1708926750289792). An advertising pixel. It can record page views and, on some pages, product views, add to cart, checkout, and purchase.
Meta Conversions API. After a paid order, our server can send Meta a purchase event with a hashed email or phone number. This is a server-side advertising event. It sends only when that access token is turned on.
TikTok Pixel (ID D8HJH8JC77UA4F3ILP0G). An advertising pixel. It can record page views and, on the order confirmation page, a payment event.
TikTok Events API. After a paid order, our server can send TikTok a payment event with a hashed email or phone number. This is a server-side advertising event. It sends only when that access token is turned on.
Microsoft Clarity (project vzxetyyb6b). Session and usability analytics. It does not load on admin pages.
Contentsquare. Session and usability analytics.
Endorsely. Affiliate click tracking when a referral code is in use.

We do not run a Klaviyo onsite tracker, and Klaviyo does not send Shirt-Tucker email. Customer email is sent with Resend.

"Hashed" means the email or phone is converted with SHA-256 before it goes to Meta or TikTok for matching. Those server ad events do not include the raw address or number.

3. How we use personal information

Orders. To take payment, ship the belt, and send order and shipping email through Resend.
Support and warranty. To answer you and to administer the 12-month limited warranty.
Email you asked for. Product news and offers, if you subscribed. Each marketing email has an unsubscribe link.
Analytics. To see which pages are used and to fix the site.
Advertising. To measure ads and to reach people who have shown interest in the product. That can include sharing identifiers with Meta and TikTok, as described above.
Affiliates. To credit a referral.
Safety and legal duties. To limit fraud and to meet tax, accounting, and other legal requirements.

4. How we share personal information

We do not sell personal information for money. We do share it with companies that process orders and email, and with advertising platforms that measure and deliver ads. Under the California Consumer Privacy Act, as amended by the CPRA, sharing an identifier with an advertising platform for cross-context behavioral advertising can be a "share," and sometimes a "sale," even when no money is paid. The opt-out in section 6 covers that sharing.

Stripe - payment processing. Stripe Privacy Policy
Resend - customer email, including order messages, warranty messages, and email you asked us to send. Resend Privacy Policy
EmailJS - delivery of the contact form.
Endorsely - affiliate tracking.
Google - Analytics and Tag Manager, for site measurement.
Meta and TikTok - advertising pixels and, when configured, server advertising events. Meta Privacy Policy · TikTok Privacy Policy
Microsoft Clarity and Contentsquare - usability analytics.
Shipping carriers and EasyPost - your name and address, so the order can ship.
Public authorities - when the law requires it.

We may also share information with professional advisors who are bound to keep it confidential, and if the business is sold or reorganized.

5. Cookies and other choices

You can block or delete cookies in your browser. The site still works. A saved promo code or affiliate credit may not.
Google Analytics opt-out: tools.google.com/dlpage/gaoptout.
Meta ad preferences: Meta ad settings.
TikTok: Profile, then Settings and privacy, then Privacy, then Ads personalization.
Marketing email: use the unsubscribe link, or email [email protected]. Order email about a purchase you made will still be sent.

Some browsers send a Do Not Track signal. There is no single rule for what that signal means, and this site does not treat Do Not Track as an opt-out. We do honor Global Privacy Control, which is described next.

The button opts this browser out. If your browser sends Global Privacy Control (navigator.globalPrivacyControl), we treat that as the same opt-out, with no extra click. In either case we do not load the Meta or TikTok advertising pixels, or the Endorsely affiliate script, for that visit, and we do not send server-side advertising events for that order. Checkout, order email, and ordinary analytics (Google Analytics, Tag Manager, Clarity, and Contentsquare) still run.

The footer link "Do Not Sell or Share My Personal Information" opens this section and sets the same opt-out.

7. California privacy rights (CCPA/CPRA)

If you live in California, you have these rights, subject to the exceptions in the statute:

Know the categories and specific pieces of personal information we collected, where it came from, why we collected it, and who received it.
Delete personal information we hold, except records the law lets us keep (for example, tax records).
Correct inaccurate personal information.
Opt out of sale or sharing, including sharing for cross-context behavioral advertising. Use section 6, Global Privacy Control, or email. We will not make you create an account to opt out.
Limit use of sensitive personal information. We do not use sensitive personal information to infer characteristics about you. Card numbers are handled by Stripe. If you want a limit applied to other sensitive information, email us.
Appeal a denial by replying to our decision email.
Non-discrimination. We will not deny you the product, change the price, or cut service because you used these rights.

An authorized agent may submit a request for you. We may ask for proof that the person is your agent and that you live in California.

Email [email protected] with the subject "Privacy request". Include the email address on the order so we can find the right records. We use that message only to answer the request. We aim to reply within 45 days.

Under California's Shine the Light law (Civil Code section 1798.83), a customer can ask which third parties received certain personal information for their own direct marketing in the prior calendar year. Email the same address with the subject "Shine the Light Request", your name, and your mailing address.

If you live in another U.S. state with a similar privacy law, including Colorado, Connecticut, and Virginia, you can use the same email to ask for access, deletion, correction, or an opt-out of targeted advertising.

8. How long we keep information

Order records are kept as long as tax and accounting rules require, typically 7 years. Warranty records are kept through the 12-month warranty and a short time after, so a claim can be checked. Marketing records are kept until you unsubscribe, and then only as needed to remember that choice. Analytics companies keep data on their own schedules.

9. Other sites

Links go to Stripe, Amazon, TikTok Shop, and social networks. Those sites have their own policies. A purchase on Amazon or TikTok Shop is covered by that platform's policy, not this one.

10. Security

Pages use HTTPS. Card numbers are entered on Stripe, not on our servers. No method of sending or storing information is perfectly secure.

11. Children

This site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 gave us information, email [email protected] and we will delete it.

12. Changes

We may update this policy. The date at the top is the date of the latest version. From that date, the posted policy is the one that applies.

13. Contact

Privacy questions and requests:
Email: [email protected]
Mail: Shirt-Tucker, PO Box 67, Agoura Hills, CA 91376
Web: shirt-tucker.com/contact