State-specific privacy rights

1. California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), gives you the following rights:

• Right to know what categories of personal information we collect, the sources, the business purpose, and the categories of third parties with whom we share it.
• Right to access specific pieces of personal information we have collected about you (in a portable format).
• Right to delete personal information we have collected, subject to certain exceptions.
• Right to correct inaccurate personal information.
• Right to limit use of sensitive personal information to permitted business purposes.
• Right to opt out of sale or sharing of personal information for cross-context behavioral advertising. We do not sell or share personal information as those terms are defined under CCPA/CPRA.
• Right to non-discrimination for exercising any of the foregoing rights.

To exercise these rights, email yabdallah17@proton.me from the address associated with your account. We may require verification of your identity before processing a request. Authorized agents may submit requests with a notarized power of attorney.

Notice of financial incentives. Our Partner Program (commissions on referred sales) and any volume-discount program may involve the collection of personal information in exchange for value. Participation is voluntary and you may withdraw at any time.

2. Virginia (VCDPA)

Virginia residents have rights under the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.):

• Confirm whether we process your personal data and access that data;
• Correct inaccuracies in your personal data;
• Delete personal data we hold about you;
• Obtain a portable copy of the data;
• Opt out of (a) sale of personal data, (b) targeted advertising, and (c) profiling in furtherance of decisions producing legal or similarly significant effects.

To exercise these rights, contact yabdallah17@proton.me. We will respond within 45 days. If we decline, you may appeal by replying to our response email with “Appeal” in the subject line; we will respond to appeals within 60 days and, if we decline the appeal, provide a means to contact the Virginia Attorney General.

3. Colorado (CPA)

Colorado residents have substantially similar rights under the Colorado Privacy Act (C.R.S. § 6-1-1301 et seq.), including the right to opt out of sale, targeted advertising, and profiling, plus a right to access, correct, delete, and obtain a portable copy of your data. Colorado's universal opt-out mechanism (UOOM) is supported via Global Privacy Control (GPC) — see our Cookies & Tracking page.

4. Connecticut (CTDPA)

The Connecticut Data Privacy Act (Conn. Pub. Acts No. 22-15) grants Connecticut residents rights of access, correction, deletion, portability, and opt-out of sale, targeted advertising, and profiling. We honor universal opt-out signals (GPC).

5. Utah (UCPA)

Utah residents have rights under the Utah Consumer Privacy Act (Utah Code § 13-61-101 et seq.) to access, delete, and obtain a portable copy of personal data, and to opt out of sale and targeted advertising.

6. Texas (TDPSA)

The Texas Data Privacy and Security Act (Tex. Bus. & Com. Code § 541) grants Texas residents rights of access, correction, deletion, portability, and opt-out of sale, targeted advertising, and profiling. We disclose that, as required under TDPSA, we may sell personal data only as that term is statutorily defined and only with a clear and conspicuous notice on the page where collection occurs. We do not currently sell personal data under any state law definition.

7. Oregon, Montana, Iowa, Tennessee, Delaware, New Hampshire, New Jersey, Indiana, Minnesota, Maryland, Rhode Island, Nebraska, Kentucky

Residents of these states have rights under their respective consumer-privacy laws that are substantively comparable to those in Sections 1–6 above. To exercise any of these rights, contact yabdallah17@proton.me. We will identify the applicable law, verify your residency, and respond within the statutory deadline.

8. Sensitive personal information

Several state laws give heightened protection to “sensitive” personal data (racial or ethnic origin, religion, mental or physical health diagnosis, sexual orientation, citizenship status, genetic or biometric data, precise geolocation, contents of mail, email, or text messages where we are not the recipient, financial-account numbers in combination with credentials). We do not knowingly collect any of these categories in the course of normal commerce. If you provide such information voluntarily (for example, in a support email), we will hold it under heightened protection and delete it when no longer needed to resolve your request.

9. Children

Our website is not directed to children under 13 (or, for some state laws, under 16 or 18). We do not knowingly collect personal information from such individuals. Our age gate requires self-attestation that the user is at least 21 years of age before any commerce is conducted.

10. Updates

State privacy law is changing quickly. We update this page when a new state law takes effect or when existing laws change. We will not silently reduce your rights — we will either preserve existing protections or post a clear notice describing the change.