Legal
Privacy Policy
Last Updated: March 2026
Quick Navigation
1. Scope & Data Controller
Cynic & Spore Labs LLC controls the personal data processed through our storefront and customer systems. This policy applies to physical goods orders, subscription services, customer support interactions, opt-in notifications, and digital chain-of-custody services tied to batch and QR-linked records.
2. Data We Collect
Order & Account Data: Name, email, shipping address, order identifiers, and account/session information required for checkout, fulfillment, support, and fraud controls.
Subscription Data: Subscriber email, plan/cadence choices, renewal state, skip/pause actions, and related operational events.
Batch and Chain-of-Custody Records: Batch identifiers, QR-linked certificate references, event logs, and account-scoped custody metadata needed for traceability.
Notification Data: Email, consent timestamp, confirmation status, and unsubscribe/suppression events related to any opt-in notifications.
Support & Communications: Messages, ticket context, and related order/subscription identifiers you provide.
Technical & Security Data: Device/browser metadata, IP logs, and request telemetry used for reliability, abuse prevention, and compliance documentation.
Payment Data: Payments are processed by Stripe. We do not store full card numbers or CVVs.
3. How We Use Data
— To process orders, subscriptions, and fulfillment operations.
— To provide customer support and respond to policy or compliance requests.
— To operate batch documentation and chain-of-custody traceability features.
— To deliver opt-in notifications and transactional service messages.
— To detect fraud, abuse, chargeback misuse, and platform security threats.
— To satisfy legal, tax, accounting, and audit obligations.
— To analyze aggregate demand and improve operational planning.
We do not sell personal data to third parties for advertising or list-broker purposes.
5. Retention & Audit Records
We retain customer information for audit, compliance, accounting, fraud-prevention, warranty, and dispute-resolution purposes. Retention duration depends on legal and operational requirements.
Order and payment-related business records are retained for required tax and audit windows. Batch and certificate records, including QR-linked references, may be retained long-term or indefinitely where needed to preserve traceability and historical integrity.
Notification subscriptions can be ended at any time; however, suppression/compliance records may be retained so we can honor unsubscribe requests and avoid unauthorized re-mailing.
6. Your Rights
You may request access to, correction of, or deletion of personal data, subject to applicable law and legitimate retention obligations.
Where deletion is requested, we will delete or de-identify data when legally and operationally permissible. We may retain limited records necessary for audits, legal compliance, fraud prevention, financial reconciliation, and immutable traceability records already linked to physical goods.
7. Email & Communication Preferences
Unsubscribe controls apply to opt-in notifications. Transactional and service-critical emails related to active orders, subscriptions, account access, fraud checks, or policy compliance may still be sent.
To manage communication preferences, contact hello@cynicandspore.com.
8. Security
We use role-scoped access controls, transport encryption, environment-segregated credentials, and operational monitoring to protect customer and platform data. No security control is absolute, but we apply layered safeguards aligned with the sensitivity of the data we process.
9. Children & Jurisdiction
Our services are not directed to children under 13. If you believe a child has submitted personal data, contact us for removal review. Data may be processed in jurisdictions where our service providers operate, subject to applicable legal safeguards.
10. Policy Updates
We may update this policy to reflect legal, security, or service changes. The posted date indicates the latest effective revision.
11. Contact
Privacy inquiries and rights requests: hello@cynicandspore.com