Privacy Policy

1. Who We Are

Armored Arms (“we,” “us,” or “our”) is operated by Armored Arms, a company registered in the United States. Our website is located at hebelken.com. If you have questions about this policy, contact us at ken.hebel.developer@gmail.com.

2. Information We Collect

We collect the following personal information when you use our site:

• Account information: name, email address, and password when you create an account.
• Order information: shipping address, billing details, and order history when you make a purchase.
• Payment information: credit card details are processed directly by Stripe and never stored on our servers.
• Authentication data: if you sign in with Google or Apple, we receive your name, email, and profile photo from those services.
• Usage data: pages visited, browser type, device information, and IP address collected automatically through server logs.

3. How We Use Your Information

• Process and fulfill your orders, including shipping and delivery notifications.
• Manage your account and provide customer support.
• Send transactional emails (order confirmation, shipping updates, password resets).
• Improve our website, products, and services.
• Detect and prevent fraud or unauthorized access.

We do not sell your personal information to third parties. We do not send marketing emails unless you explicitly opt in.

4. Third-Party Services

We share your information only with the following service providers who need it to fulfill their function:

• Stripe — payment processing. Stripe's privacy policy governs their handling of your payment data.
• Amazon Web Services (AWS) — hosting, email delivery (SES), and data storage (S3). Data is stored in the US.
• EasyPost — shipping label generation and package tracking.
• Google / Apple — if you use social sign-in, their respective privacy policies apply to the authentication process.

5. Cookies & Local Storage

We use an HTTP-only cookie to maintain your login session. We also use browser local storage to persist your shopping cart if you are not logged in. We do not use third-party tracking cookies or advertising pixels.

6. Data Security

We protect your data using HTTPS encryption in transit, bcrypt password hashing at rest, and secure HTTP-only cookies for authentication. Payment data is handled entirely by Stripe and never touches our servers. Our infrastructure runs on AWS with automated backups and monitoring.

7. Data Retention

We retain your account and order data for as long as your account is active or as needed to provide services, comply with legal obligations, and resolve disputes. If you wish to delete your account and associated data, contact us at ken.hebel.developer@gmail.com.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of any marketing communications.
• Request a portable copy of your data.

To exercise any of these rights, email ken.hebel.developer@gmail.com. We will respond within 30 days.

9. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated “last updated” date. Continued use of the site after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this privacy policy or our data practices, contact us at:
ken.hebel.developer@gmail.com