Privacyupdated <date, e.g. 2026-11-01>

Who we are

<your legal name> runs swagmoneyrunning.com (“S.M.R.”). Contact: support@swagmoneyrunning.com.

What we collect, by part of the site

Shopping

• At checkout: email, shipping and billing address, optional phone number, and what you ordered. Guests do not need an account.
• Payment: entered into Stripe's secure payment form. Card numbers never touch our servers; we receive the payment result and a token.
• Why: to take payment, ship your order, send order updates, and handle returns and tax records.

Community profiles (optional)

• Sign-in: your email address, used only to send you a one-time sign-in link. It is never shown on your page or in the directory.
• What you add: handle, display name, About me, where you run (free text, never an exact location), terrain tags, up to five https links, an avatar and a banner.
• Photos: re-encoded when uploaded; location and camera data inside the file is removed.
• Connections: friend requests, friends, your Top 8, guestbook entries you write, accounts you block (private), and reports you file (private to you and moderators).
• Visibility: your page is public. You can hide yourself from the member directory and hide your friends list in Settings → Privacy.
• Deleting your account (Settings → Account) removes your profile, links, photos and sign-in. Orders you placed in the shop are separate and are kept as required for accounting.
• Age: community accounts are for people 18 and over.

The zine

Reading the zine needs no account. We count visits in aggregate only (see Analytics below). Only editorial staff have accounts in the publishing system.

Cookies

We set only the cookies the site needs to work. We do not use advertising cookies, and our analytics (below) uses no cookies at all.

• _medusa_cart_id, _medusa_cache_id: remember your cart.
• _smr_order_access: lets the browser that placed an order see its confirmation for one hour.
• sb-…-auth-token: keeps a community member signed in (HttpOnly).
• payload-token: editorial staff sign-in only.
• Stripe may set its own cookies inside its payment form to prevent fraud.

Analytics

To see which pages and features people use, we count visits with PostHog. It is set up to be anonymous: no cookies, nothing stored on your device, no profile of you, no advertising, and no link to your account or your orders. It records the page you viewed (never your handle, a search, or an order number), how long you stayed, roughly what device and country you are in, and a few feature actions such as “logged a run” with no names or text attached. We ask PostHog not to store visitors' IP addresses. The data goes through our own server first. A browser that sends Do Not Track or Global Privacy Control is never counted.

Who processes data for us

• Stripe (payments), PostHog (anonymous usage statistics, [to be confirmed by the owner]), the shop platform host ([to be confirmed by the owner]), Supabase (community accounts and photos), the publishing and media host ([to be confirmed by the owner]), email delivery ([to be confirmed by the owner]), and shipping carriers ([to be confirmed by the owner]).

How long we keep it

Order records: [to be confirmed by the owner]. Community data: until you delete your account. Moderation records: [to be confirmed by the owner]. Server logs: [to be confirmed by the owner]. Anonymous usage statistics: [to be confirmed by the owner].

Your choices

You can ask us to access, correct, export or delete your information, and you can delete your community account yourself. Email us and we will respond within [to be confirmed by the owner]. Rights that apply to you depend on where you live.