Privacy Policy
Last updated: July 23, 2026
This Privacy Policy explains how the operator of conebarn420.org (“we,” “us,” or “our”) collects, uses, and protects information when you browse the site, interact with product pages, or place an order.
Information we collect
Shopping and order information
When you add products to your cart, begin checkout, create an account, or place an order, we may process the information needed to complete and support the transaction. This can include your name, contact details, billing and shipping address, order contents, shipping choice, payment status, and customer-service history. Payment providers process payment credentials under their own privacy policies. Our analytics system does not record card numbers, security codes, passwords, or the values entered into checkout fields.
Site analytics and interaction data
If you choose “Allow analytics,” we use first-party analytics to understand how visitors find and use the site. This may include an anonymous visitor ID and session ID; referral source and campaign parameters; pages and sections viewed; time on page; scroll depth; product and pack selections; gallery, review, question, cart, and checkout interactions; clicks on interactive and non-interactive areas; repeated or unresponsive clicks; coarse pointer movement; browser and device characteristics; approximate country; performance measurements; and JavaScript errors.
With analytics consent, some non-sensitive browsing sessions may also be replayed so we can diagnose usability problems. Replay masks text-entry fields and excludes checkout, account, login, and order-confirmation pages. We do not intentionally record typed form values, passwords, payment information, email addresses, phone numbers, street addresses, or private account content in analytics or replay.
Server and security data
Our hosting and security systems process technical request data needed to deliver and protect the site, such as request time, requested path, response status, browser user agent, IP address, security request identifiers, and approximate country. The first-party behavioral analytics database stores rotating one-way network and browser hashes rather than a raw IP address. Limited operational logs may retain IP addresses for security, fraud prevention, troubleshooting, and legal compliance.
Cookies and similar storage
Necessary cookies support core functions such as the cart, checkout, account security, and your privacy choice. Optional first-party analytics cookies and local browser storage are activated only after analytics consent. They help us recognize an anonymous returning browser, keep a visit together as one session, and preserve the source that brought the visit to the site. You can change your choice at any time through the “Privacy choices” link shown on the site.
How we use information
- Provide the site, cart, checkout, delivery, returns, and customer support.
- Measure which sources, pages, and interactions contribute to orders and refunds.
- Identify broken controls, confusing sections, performance problems, fraud, and security threats.
- Improve products, content, merchandising, and the purchase experience.
- Meet accounting, tax, legal, and regulatory obligations.
How long we keep information
Behavioral event records are normally kept for up to 400 days. Events connected to an order may be kept for up to 730 days so that acquisition, fulfillment, returns, and refunds can be analyzed together. Consented session-replay records are normally kept for 30 days. Structured analytics server logs are normally kept for 30 days. Aggregated daily statistics that no longer identify a visitor may be kept longer for trend analysis. Orders, tax records, fraud records, and customer-service records may be retained longer when required for business or legal purposes.
When we share information
We may share information only as needed with service providers that operate the store, hosting, security, payments, shipping, email, fraud prevention, and customer support; with professional advisers; in a business transfer; or when required by law. Our detailed behavioral event ledger and replay system are hosted for this site rather than sold as a data product. We do not sell payment credentials or passwords.
Your choices and rights
You may use the site with necessary storage only, allow optional analytics, or change that choice later. A browser Global Privacy Control signal disables session replay. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or information about disclosures. Some information may need to be retained to complete orders, prevent fraud, resolve disputes, or comply with law.
Age restriction
This site and its products are not directed to children. You must meet the legal age requirements that apply where you live and purchase.
Contact us
To ask a privacy question or make a rights request, use our Contact page. We may need to verify your request before acting on it.
Changes to this policy
We may update this policy when our practices, services, or legal obligations change. The latest version and its update date will be posted on this page.