Privacy policy

Last updated October 3, 2026

This policy explains what Short Bus Strength Co. ("we", "us") collects when you use shortbusstrength.com, why, and what you can do about it. We keep it short because we collect very little.

What we collect

• Account details: your name, email address, and either a password or a link to your Google account. Passwords are stored only as a salted one-way hash; we can never see them.
• Google sign-in: if you choose it, Google shares your name, email address and an account ID with us. We don't get your Google password or access to anything else in your Google account.
• Email list: the email address you enter in "Get on the bus", and whether you want drop emails.
• Messages: what you send through the contact form.
• Orders (once the store opens): your shipping address and order details, which we share with our print partner so they can make and ship your order. Card payments are handled by the payment processor; we never see or store your full card number.
• Technical data: our host, Cloudflare, processes your IP address and browser details to deliver the site and block attacks. We use your IP address briefly to limit repeated sign-in attempts.

Cookies

We use one essential cookie, sbs_session, to keep you signed in, and a short-lived cookie during Google sign-in. We don't use advertising or tracking cookies, so there's nothing to opt out of.

How we use it

• To run your account and sign you in.
• To send emails you asked for: account confirmations, password resets, and drop alerts if you opted in.
• To answer your messages and handle orders.
• To keep the site secure.

We don't sell your personal information or share it for advertising.

Who processes it for us

• Cloudflare: website hosting and our account database.
• Formspree: delivers email list sign-ups and contact form messages to us.
• Google: only if you choose to sign in with Google.
• Our email provider: sends account and drop emails.

Your choices

• Update or delete: change your name, password and email preferences in your account, or delete your account there. Deleting removes your account and sign-in data right away.
• Unsubscribe: turn off drop emails in your account, or use the unsubscribe link in any email.
• Ask us: to see, correct or delete anything else we hold, contact us. We'll respond within 30 days.

How long we keep it

Account data stays until you delete your account. Order records are kept as long as tax law requires. Sign-in attempt records are deleted after 24 hours.

Kids

This site isn't meant for anyone under 13, and we don't knowingly collect their information.

Changes

If we change this policy we'll update the date at the top. Significant changes will be emailed to account holders.

Contact

Questions about privacy? Use our contact page.