1. Overview & Commitment to Privacy
ThinStand ("ThinStand", "we", "us", or "our") respects your personal privacy. This Privacy Policy details our privacy standards and data handling practices when you explore our website, review our bulk pricing calculator, or submit publisher inquiries.
2. Information We Collect
We collect limited, purposeful categories of data to provide, operate, and evaluate our B2B website:
- Visitor & Device Telemetry: Anonymized browser type, browser version, operating system, screen device category, and coarse country level geolocation.
- Interaction & Engagement Events: Clicks on Call-to-Action (CTA) buttons, interactive pricing slider adjustments, referring source URLs, and aggregate duration of your visit.
- Direct Communications: When you email our team regarding orders, sample kits, or custom quote requests, we receive your email address, company or publishing imprint name, and correspondence history.
3. Anonymous Analytics & Salted IP Hashing
To understand website performance while strictly maintaining visitor privacy, IP addresses are never stored in raw, identifiable form in our databases.
How Our Cryptographic Hash Works:
Each incoming IP address is processed with a one-way SHA-256 HMAC hash utilizing an encrypted server key (config('app.key')). This transforms your IP address into a 64-character irreversibly pseudonymized string that cannot be reverse-engineered or matched against external consumer directories.
4. How We Use Information
We process collected information solely for legitimate business operations:
Website Reliability
Ensuring responsiveness, diagnosing traffic bottlenecks, and verifying feature compatibility across operating systems.
Publisher Inquiries
Fulfilling bulk pricing quotes, custom imprint consultations, and providing physical sample units.
Security & Abuse Defense
Protecting our servers against brute-force attacks, DDoS attempts, automated bot scraping, and fraudulent submissions.
Product Discovery Analysis
Measuring aggregate interest in wholesale tiers to plan manufacturing runs and supply chain capacity.
5. 90-Day Auto-Expiration Retention
In accordance with data minimization principles, ThinStand enforces an automated data retention lifecycle:
All visitor analytics records, click event timestamps, and session logs automatically expire and are permanently purged from database storage after ninety (90) days. We do not maintain historical archives of individual browsing sessions.
7. Third-Party Services
Our website may contain links to publisher catalogues, client book portals, or external websites. ThinStand is not responsible for the privacy practices or content of third-party platforms. We encourage you to review the privacy policies of any external destination you visit.
8. Information Security Measures
We implement industry-standard physical, technical, and administrative safeguards to protect your information, including TLS/HTTPS encryption in transit, isolated server infrastructure, access-controlled admin authentication with rate-limiting, and encrypted databases.
9. Your Privacy Rights (GDPR & International)
Depending on your jurisdiction (such as under the European Union General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA)), you hold rights including:
10. Data Protection Contact
If you have questions, comments, or requests regarding this Privacy Policy, reach our designated privacy contact directly at:
ThinStand Data Privacy Office
hello@thinstand.com