Bullpen Labs LLC, doing business as Bullpen Supps, operates this website and online shop from 30 Forest Drive, Hegins, PA 17938. In this policy, "Bullpen," "we," "us," and "our" refer to Bullpen Labs LLC.

This policy explains how we collect, use, disclose, and retain information when you browse the site, create an account, buy or reserve products, submit a form, join a mailing list, or otherwise communicate with us.

Identifiers and contact details can include your name, email address, phone number, account credentials handled by our store system, billing or shipping address, and pickup details.

Commercial information can include cart contents, products purchased, discounts, payment and refund status, fulfillment status, and order history. Communications can include form submissions, support messages, product interests, campaign history, marketing consent, and unsubscribe status.

Technical and security information can include IP address, browser and device details, operating system, approximate location, referring page, pages viewed, interactions, timestamps, request and error logs, cookie or browser-storage identifiers, and fraud, spam, or security signals.

We collect information directly from you, automatically from your browser or device, and from service providers that help process payments, fulfill orders, deliver email, measure site use, host the store, and protect it from abuse.

We use account and order information to maintain your account, operate the cart and checkout, process payments, arrange shipping or pickup, send receipts and order updates, provide support, handle returns or disputes, and keep required business records.

Card payments are processed by Stripe through our Medusa-powered store. Bullpen does not receive or store your full payment-card number. We receive payment status and transaction references needed to complete and support an order.

The site uses browser storage and similar technologies to keep checkout and account features working. This can include a cart identifier and, when you sign in, a customer login token. Clearing browser data may sign you out or reset your cart.

Google Analytics sets first-party cookies, commonly named _ga and _ga_<measurement-id>, to distinguish visitors and sessions. Under Google's default configuration, these cookies can remain for up to two years unless they expire sooner, are deleted, or are limited by your browser settings.

You can block or delete cookies through your browser. Some essential cart or account features may not work correctly if all browser storage is disabled.

We use Google Analytics 4 across the site to understand traffic, store usage, purchases, and advertising results. Google Analytics can collect page URLs, referring pages, interactions and events, session statistics, browser and device information, purchase transaction IDs and values, product details, and approximate geographic information. Google receives technical information such as your IP address when the service is used; Google states that Analytics uses the address to derive location information and discards it before the address is logged or stored.

Google uses first-party cookies and similar identifiers to provide measurement reports. When our Analytics property is linked to Google Ads, purchase events and attribution information can be imported into Google Ads for conversion reporting and campaign optimization. We do not intentionally send names, email addresses, full payment details, shipping addresses, or other directly identifying checkout fields in Analytics purchase events.

You can limit Analytics by blocking or deleting cookies or by using Google's Analytics opt-out browser add-on. Google's own terms and privacy materials explain how Google processes information from sites that use its services.

Our contact form uses Google reCAPTCHA and rate limiting to distinguish legitimate submissions from automated abuse. When you use the protected form, Google can receive your IP address, page and device information, and interaction signals needed to provide reCAPTCHA. We also record submission timestamps, verification results, and an IP address for security and rate-limiting purposes.

Google's Privacy Policy and Terms apply to its processing through reCAPTCHA. Do not include payment-card numbers, medical records, or other sensitive information in a contact message.

We use information to operate and secure the site; provide accounts, checkout, shipping, and pickup; process and support orders; communicate with you; manage contacts and campaigns; prevent fraud and spam; troubleshoot errors; maintain records; enforce our terms; comply with law; and understand and improve store performance.

We may combine information from different parts of the store when reasonably needed for these purposes, such as connecting a support message to an order or honoring an unsubscribe request across campaign lists.

We send transactional messages, such as receipts, fulfillment updates, contact-form confirmations, and support replies, to provide services you request.

We may send product, promotion, or company news to people who sign up for marketing or who are otherwise eligible to receive it under applicable law. Marketing audiences can include prior customers and contacts imported or maintained by the Bullpen team. Marketing messages identify Bullpen, include our mailing address, and provide an unsubscribe method.

You can unsubscribe from marketing at any time using the link in a marketing email or by contacting us. We retain enough information on a suppression list to honor the request. Unsubscribing does not stop transactional, account, safety, or legally required messages.

We disclose information only as reasonably needed to operate the business and site. Recipients can include Stripe for payments; Resend for email delivery; Google for Analytics, Google Ads conversion measurement, and reCAPTCHA; Supabase Storage for site and product media; Medusa ecommerce infrastructure; website hosting, database, security, and technical-support providers; fulfillment or delivery providers; and professional advisors.

We may also disclose information to comply with law or valid legal process, protect customers and the business, investigate fraud or security incidents, enforce our agreements, or support a merger, financing, sale, or transfer of all or part of the business subject to appropriate protections.

We do not sell personal information for money. The storefront code does not currently use a third-party behavioral advertising pixel. Some privacy laws define sale, sharing, or targeted advertising more broadly; you may contact us about any rights that apply to you.

We retain information for as long as reasonably needed for the purpose collected. The period varies by record: account data may remain while an account is active; order and payment records may be kept for tax, accounting, warranty, fraud, chargeback, and legal needs; communications are kept as needed for support; and unsubscribe records are retained to honor marketing choices.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No storage system or internet transmission is completely secure, so we cannot guarantee absolute security.

You may update certain account information by signing in. You can unsubscribe from marketing through the link in a campaign email, and you can control cookies through your browser or the Google Analytics opt-out tools described above.

Depending on where you live and whether a law applies, you may request access to, correction of, deletion of, or a portable copy of personal information, or ask to opt out of certain processing. You may also have a right to appeal a denied request. We will not discriminate against you for exercising an applicable privacy right.

Send privacy requests to support@bullpensupps.com. We may verify your identity or an authorized agent's authority and may deny or limit a request where an exception applies, including records needed for orders, taxes, accounting, fraud prevention, security, legal claims, or compliance.

The site is a general-audience store and is not directed to children under 13. We do not knowingly collect personal information from children under 13. A parent or guardian who believes a child submitted information should contact us so we can review and delete it where appropriate.

We may update this policy as the store, providers, or legal requirements change. We will post the revised policy here and update the date below. Material changes may receive additional notice when appropriate.

Questions and privacy requests can be sent to support@bullpensupps.com, by phone at (800) 585-9016, or by mail to Bullpen Labs LLC, 30 Forest Drive, Hegins, PA 17938.