Legal
Cornographix ("Cornographix," "we," "us," or "our") operates the website located at cornographix.com (the "Site") and sells cornhole bags and related products. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit the Site, place an order, contact us, or otherwise interact with us. By using the Site or purchasing from us, you acknowledge that you have read and understood this Privacy Policy.
Information you provide directly. When you place an order, create an account, contact customer support, request a custom quote, subscribe to marketing emails, or otherwise interact with us, we collect: your name; billing and shipping address; email address; phone number (if provided); order history; design files, artwork, and notes you upload for custom orders; and any correspondence you send us.
Payment information. When you pay for an order, payment card and financial information is collected and processed by our payment processor (currently Shopify Payments and/or Stripe). We do not see, receive, or store full card numbers, CVV codes, or bank account details. We may receive limited transaction metadata such as the last four digits of the card, card brand, billing ZIP, transaction ID, and authorization status.
Automatically collected information. When you use the Site, we and our third-party service providers automatically collect: IP address; device and browser type; operating system; referring URL; pages viewed and time spent; click and scroll behavior; session timestamps; approximate geographic location (derived from IP); and diagnostic/error data. This information is collected through cookies, pixels, SDKs, log files, and similar technologies.
Information from third parties. We may receive information about you from social media platforms (if you engage with our posts or ads), advertising partners, analytics providers, fraud-prevention services, and shipping carriers.
We do not knowingly collect personal information from children under the age of 13 (or under 16 where applicable). If you believe a child has provided us personal information, contact us and we will delete it.
We use personal information to: (a) process, fulfill, and ship orders, including custom orders; (b) accept payment, issue refunds where legally required, and prevent fraud; (c) communicate with you about orders, proofs, tracking, and support; (d) send marketing communications where you have consented or where permitted by law (you may opt out at any time); (e) operate, maintain, secure, and improve the Site and our products; (f) personalize your experience and measure advertising effectiveness; (g) comply with legal obligations, enforce our Terms of Service, and protect our rights, property, and safety and those of our customers and the public; (h) respond to your inquiries, reviews, and feedback; and (i) conduct business analytics and product research.
If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: (a) performance of a contract — to fulfill your order and provide customer support; (b) legitimate interests — to run, improve, and secure our business, prevent fraud, and market similar products to existing customers; (c) consent — for optional marketing emails, non-essential cookies, and sensitive data processing, which you may withdraw at any time; and (d) legal obligation — where we must process data to comply with applicable law.
We use cookies and similar technologies to keep your cart populated, remember your preferences, authenticate sessions, measure site performance, and support advertising. Cookies fall into four broad categories on this Site: (a) strictly necessary — required for cart, checkout, and security; (b) functional — remember preferences such as accent color and recently viewed products; (c) analytics — help us understand how the Site is used; (d) advertising — used by us and our partners to deliver and measure relevant ads.
You may control cookies through your browser settings, by opting out via industry tools (for example, the Digital Advertising Alliance at optout.aboutads.info), or where available through an in-Site cookie preferences tool. Disabling strictly necessary cookies will break core Site features such as the shopping cart.
We do not sell your personal information for money. We disclose personal information only as described below:
Service providers. We share information with vendors who perform services on our behalf, including: e-commerce platform and hosting (Shopify); payment processing (Shopify Payments, Stripe); shipping and fulfillment (USPS, UPS, FedEx, carriers and 3PLs); email and SMS delivery; customer support tools; analytics (such as Google Analytics); advertising and retargeting (such as Meta/Facebook, TikTok, Google Ads); fraud prevention; and cloud storage (Amazon Web Services). These providers are contractually required to use personal information only to provide services to us.
Advertising partners. We may share identifiers, device data, and behavioral information with advertising networks and social platforms to deliver targeted ads about Cornographix products. Some of this sharing may be considered a "sale" or "share" of personal information under certain U.S. state privacy laws. You may opt out at any time — see Section 9.
Legal and safety. We may disclose information to comply with applicable laws, subpoenas, court orders, or lawful requests by government authorities; to enforce our Terms; to protect our rights, property, or safety; to prevent fraud, abuse, or imminent harm; and to defend against legal claims.
Business transfers. If Cornographix is involved in a merger, acquisition, financing, bankruptcy, or sale of assets, your information may be transferred as part of that transaction, subject to the terms of this Privacy Policy.
With your consent. We will share your information for any other purpose with your consent.
We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide our products and services, comply with legal, accounting, and tax obligations, resolve disputes, and enforce our agreements. Order records, including invoices and transaction data, are typically retained for at least seven (7) years to comply with tax and financial record-keeping requirements. When information is no longer needed, we delete or anonymize it.
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction. These include encryption in transit (TLS/HTTPS), access controls, vendor security reviews, and PCI-DSS-compliant payment processing handled by our payment provider. No system is perfectly secure, however, and we cannot guarantee absolute security. You use the Site and provide information at your own risk.
Depending on where you live, you may have the following rights with respect to your personal information: the right to know or access the personal information we hold about you; the right to correct inaccurate information; the right to delete personal information; the right to portability; the right to opt out of the sale or sharing of personal information and of targeted advertising; the right to limit the use of sensitive personal information; and the right to be free from discrimination for exercising these rights. Residents of California, Virginia, Colorado, Connecticut, Utah, and other U.S. states with applicable privacy laws, as well as residents of the EEA and UK, have additional rights under their local laws.
To exercise these rights, email cxadmin@cornographix.com with the subject line "Privacy Request" and describe the request. We will verify your identity before responding, typically within 45 days (California) or as otherwise required by applicable law. You may use an authorized agent to submit a request on your behalf. If we deny a request, you may appeal by replying to our response email. You will not be charged or discriminated against for exercising your rights.
"Do Not Track" and Global Privacy Control. Some browsers transmit "Do Not Track" or Global Privacy Control signals. Where required by law, we honor valid GPC signals as an opt-out of sale/sharing of personal information for users in applicable jurisdictions.
Cornographix is based in the United States and our service providers may be located in the United States and other countries. If you access the Site from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Site, you consent to this transfer. Where required by law, we rely on Standard Contractual Clauses or other lawful transfer mechanisms for cross-border transfers of personal data.
The Site may contain links to third-party sites, plug-ins, and services, including social media platforms such as Instagram and TikTok. We are not responsible for the privacy practices or content of third parties. We encourage you to review the privacy policies of any third party before providing personal information.
With your consent where required, we may send promotional emails about new products, sales, and events. You may unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or by emailing us. Transactional messages (such as order confirmations, shipping updates, and responses to your inquiries) will continue even after you unsubscribe from marketing.
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where required by law, provide additional notice (for example, by posting a prominent notice on the Site or emailing you). Your continued use of the Site after the effective date of any change constitutes your acceptance of the updated Privacy Policy.
If you have questions, complaints, or requests about this Privacy Policy or our privacy practices, please contact us at cxadmin@cornographix.com with the subject line "Privacy." EEA/UK residents have the right to lodge a complaint with their local data protection authority.
This Privacy Policy is provided for informational purposes and describes our current practices. It is not legal advice. For questions about how data-protection laws apply to you, consult a qualified attorney.