Privacy Policy

Last updated: April 2026

Cycle Part Out (“we”, “us”) operates cyclepartout.com. This policy explains what information we collect, how we use it, and your rights over it. By using the site, you agree to this policy.

What we collect

• Account information: name, email, password (stored hashed), and optional shipping addresses you save.
• Order history: items purchased, prices, shipping addresses, and tracking numbers.
• Payment details: handled by Stripe. We never see or store full card numbers; we receive a token and a last-four for receipts.
• Communications: emails you send us and messages exchanged with sellers through the site.
• Technical data: IP address, browser type, pages visited, and timestamps. Standard server logs.
• Cookies: session cookies for authentication, and analytics cookies described below.

How we use it

• To process orders, ship parts, and provide customer support.
• To prevent fraud and abuse.
• To send transactional emails (order confirmations, shipping updates, account alerts).
• To improve the site based on aggregate usage patterns.
• To comply with legal obligations (tax records, dispute resolution).

We do not sell your personal information. We do not send marketing emails without your explicit opt-in.

Third parties we share data with

• Stripe — payment processing. Subject to Stripe’s privacy policy.
• Shippo — shipping rate calculation and label generation.
• Cloudflare — DNS, CDN, and DDoS protection. Sees request metadata.
• Vercel — site hosting. Sees request metadata.
• Render — backend API hosting. Sees request metadata.
• MongoDB Atlas — database hosting. Stores account and order data.
• Salvage yards selling parts you buy — receive your shipping address to fulfill the order.

Cookies and analytics

Authentication cookies are required and cannot be disabled while logged in. We may use a privacy-respecting analytics tool (no cross-site tracking, no advertising cookies) to count page views and understand which pages are useful. You can block analytics cookies in your browser without breaking the site.

Data retention

Account information is retained while your account is active and for up to 7 years afterward to comply with tax and dispute resolution requirements. Server logs rotate after 90 days. You can request earlier deletion (see below) but transactions required for legal recordkeeping will be retained.

Your rights

You can request a copy of your data, correction of inaccurate data, or deletion of your account. Email support@cyclepartout.com from the email address on the account. Residents of California, the EU, and the UK have additional rights under CCPA, GDPR, and UK GDPR; we honor those rights for anyone who asks.

Children

The site is not directed at children under 13 and we do not knowingly collect their data. If you believe we have, email us and we will delete it.

Changes

We may update this policy. Material changes will be announced by email and on this page with a new “last updated” date.

Contact

Privacy questions go to support@cyclepartout.com.