Effective Date: January 18, 2026
Belltime Enterprise or DBA StackUp ("Company," "we," "us" or "our") operates a U.S.-based content and affiliate‑tracking platform located at stackupgear.com (the "Site" or "Service"). Our platform enables firearm, outdoor and gear content creators ("Creators") to publish product recommendations and share links that may generate affiliate commissions. We do not sell products or process payments on our Site. Because we collect certain information about our users (for example, email addresses, names, and click‑through data for analytics), we take privacy seriously and comply with applicable U.S. federal and state privacy laws including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Florida Digital Bill of Rights, the New York SHIELD Act, the Children's Online Privacy Protection Act (COPPA) and other relevant laws. This policy explains what information we collect, how we use and share it, and what rights you have regarding your personal information.
By using StackUp, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, do not use our Site.
We collect both information you provide to us directly and information gathered automatically when you use our Service.
Account Registration: When you create an account (as a Creator or general user), we request your name, email address and a password. If you post content or fill out a profile, you may voluntarily provide additional details (for example, a biography or social media handles). Any personal information you include in your content is your responsibility.
Communications: If you contact us for support or otherwise correspond with us (by email or other channels), we collect your name, contact information and the content of your message.
Newsletter or Marketing Sign‑Ups: When you subscribe to receive newsletters or marketing communications, we collect your email address and any preferences you select.
Usage Data: We track your interactions with the Site – such as the pages you view, the features you use, and the affiliate links you click. For example, when you click a "Buy" button on a Creator's page, our system logs that event (including the specific product and Creator involved). We do not store purchase information from third‑party merchants – only aggregated conversion data.
Device and Technical Information: We collect your Internet Protocol (IP) address (which reveals approximate location, such as city or state), device identifiers, browser type, operating system and referrer URLs. This helps us detect fraud, secure our platform and understand how visitors find us. We retain IP addresses only in server logs through our content delivery network (Cloudflare) for security; we do not store IP addresses in our database.
Cookies and Similar Technologies: We use a small number of cookies and similar technologies to remember preferences and gather analytics. For example, we set a first‑party session cookie (stackup_session_id) to link events together for analytics and to deduplicate actions. We do not use third‑party tracking cookies. See "Cookies and Tracking Technologies" below for details.
We do not collect sensitive personal information such as government identifiers (e.g., Social Security numbers), financial account numbers, precise geolocation, or data revealing race, ethnicity, religious beliefs, sexual orientation or health status. We do not knowingly collect personal information from children under 18 (see "Children's Privacy" below).
For California residents, the categories of personal information we have collected in the past 12 months include:
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, email address, IP address | Provided by you or collected automatically |
| Internet or Network Activity | Pages visited, link clicks, UTM parameters | Collected automatically via first‑party analytics |
| General Location Data | City or state inferred from IP address | Collected automatically via CDN logs |
| User Content | Profiles, product recommendations, comments | Provided by you |
We do not intentionally collect "sensitive personal information" (as defined under the CPRA) beyond what is necessary for the service (e.g., IP address for security).
We use the information collected for the following purposes:
To Provide and Improve the Service: We use your information to create and manage your account, display your content, track affiliate link performance and maintain the Site's functionality. We analyze aggregate usage data to improve features, measure content performance and ensure the Service runs smoothly.
Communications: We use your contact information to send account‑related notices (such as confirmations, password resets and critical updates) and, if you opt in, to send newsletters and promotional messages. You can unsubscribe from marketing emails at any time via the link in the email or by contacting us.
Analytics and Product Development: We analyze usage patterns (e.g., which pages are most visited, which affiliate links receive clicks) to troubleshoot issues and develop new features. This analysis uses de‑identified or aggregated data whenever possible.
Personalization: We may use cookies to remember your preferences or account settings so that the Site functions consistently across visits. We do not build marketing profiles for targeted advertising.
Security and Fraud Prevention: We use IP addresses, device information and log data to monitor for suspicious or unauthorized activity, prevent fraud and protect the integrity of our systems.
Legal Compliance: We may use information to comply with legal obligations, respond to lawful requests from public authorities or enforce our Terms of Service.
We will not use personal information for materially different purposes without updating this policy or obtaining your consent where required by law.
Cookies are small text files stored on your device that enable us to remember you or gather analytics. Our Site uses cookies and similar technologies for limited purposes:
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| stackup_session_id | Tracks session information for first‑party analytics and deduplicates events | 1 year | First‑party, essential |
We do not use third‑party advertising cookies or pixels. When you click an affiliate link, a cookie may be set by the merchant or affiliate network to track attribution; these cookies are governed by the third party's privacy policy.
We display a cookie consent banner on your first visit to the Site. The banner allows you to "Accept All," "Reject All," or manage your cookie preferences. We do not set non‑essential cookies until you give us affirmative consent. You can change your preferences at any time via our Cookie Settings page.
Under updated CPRA regulations effective January 1, 2026, closing or navigating away from a cookie pop‑up without affirmatively selecting an "accept" button does not constitute consent; therefore our banner requires an explicit choice and presents "accept" and "reject" options symmetrically.
Some browsers send "Do Not Track" (DNT) signals. At this time, there is no industry consensus on how to respond to DNT signals; we therefore do not treat DNT as an opt‑out. However, we do honor Global Privacy Control (GPC) signals as required by California law. When your browser or device sends a valid GPC signal, we treat it as a request to opt out of any sale or sharing of personal information and automatically reject non‑essential cookies.
You can manage cookies in several ways:
We respect your privacy and only share your personal information as described below:
We engage third‑party providers to host and operate the Site, send emails, store data and provide analytics. The primary providers we use are:
| Service Provider | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Authentication, database and storage | Supabase Privacy Policy |
| Cloudflare | Content delivery, hosting and security | Cloudflare Privacy Policy |
These providers process data on our behalf under contractual obligations to protect your information and use it only for agreed purposes.
We do not sell individual personal information for monetary consideration. We may share aggregated, anonymized analytics with brand partners or merchants to report on content performance (e.g., total clicks, conversion rates) or to improve the platform. Aggregated metrics do not identify individual users. Under Cal. Code Regs. § 7013, a "Do Not Sell or Share My Personal Information" link must be conspicuous and provide consumers a way to opt out of any sale or sharing. We honour such opt‑out requests and refrain from including the opt‑out user's data in aggregated reports where it could be considered a "sale" under the CCPA/CPRA.
We may disclose personal information if required by law, subpoena or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud or respond to a government request.
If StackUp (or substantially all of its assets) is involved in a merger, acquisition, restructuring or sale, your personal information may be transferred to the successor entity. In that event, we will require the successor to honour this Privacy Policy and, where legally required, provide notice and an opportunity to opt out.
Apart from the scenarios above, we will share your personal information with third parties only with your explicit consent.
We retain personal information only as long as necessary for the purposes described in this Policy, unless a longer retention period is required by law. Our retention schedule is as follows:
| Data Type | Retention Period |
|---|---|
| Marketing events (e.g., newsletter sign‑ups) | 90 days, then deleted |
| Activity analytics (e.g., click events) | 2 years, then deleted or aggregated |
| User profiles | Until you delete your account |
| Soft‑deleted content | Hidden from public view but retained for historical analytics |
Aggregated analytics derived from deleted data may be retained indefinitely as they do not identify individuals. If you request deletion of your information, we will honour the request subject to any legal obligations or legitimate business interests (e.g., maintaining aggregated statistics).
Depending on your state of residence, you may have certain legal rights regarding your personal information. Key rights under the CCPA/CPRA include the right to know what personal information we collect, the right to request deletion of personal information (subject to exceptions), the right to opt out of the sale or sharing of personal information, and the right to be free from discrimination for exercising these rights. Similar rights exist under the Florida Digital Bill of Rights and other U.S. state laws.
To exercise any of the rights described below, please submit a request via:
Email: privacy@stackupgear.com – include your name, the email associated with your account (if any) and your request (e.g., "access request," "deletion request"). California residents may also designate an authorized agent to submit requests on their behalf (we will require proof of authorization).
Web Form: Use the form on our "Do Not Sell or Share My Personal Information" page (accessible via the footer) to opt out of the sale/sharing of personal data. Under Cal. Code Regs. § 7013(c), the link must be conspicuous and located in the header or footer of the homepage.
We will respond to verifiable requests within the timeframe required by law (generally within 45 days, with a possible 45‑day extension). To protect your information, we may need to verify your identity before fulfilling certain requests.
You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business or commercial purposes for collection, and the categories of third parties with whom we share it.
You may request that we correct inaccurate personal information we maintain about you. We will take reasonable steps to verify your identity and correct the information.
You may request deletion of personal information we hold about you. We will delete (and instruct our service providers to delete) your information unless an exemption applies – for example, if we need the information to provide the Service, meet legal obligations, detect security incidents, protect against fraud or maintain aggregated analytics.
Although we do not sell personal information in the traditional sense, the CCPA/CPRA defines "sale" broadly to include transferring personal information for monetary or valuable consideration. If our aggregated analytics are ever considered a sale or share under the law, you may direct us to stop by visiting our "Do Not Sell or Share My Personal Information" link in the footer.
We will not discriminate against you for exercising your privacy rights. We will not deny you goods or services, charge you different prices or provide a different level of service solely because you exercised your rights (though certain features may not function if data is deleted).
Certain states provide additional rights. For example, Florida residents may opt out of certain profiling or targeted advertising. We do not engage in automated profiling for decision‑making. If you reside in a state with privacy legislation that confers additional rights (e.g., Colorado, Virginia, Connecticut, Utah, Texas), you may exercise those rights by contacting us as described above.
We implement reasonable administrative, technical and physical safeguards to protect personal information from unauthorized access, loss or misuse. Measures include:
Encryption in transit: All data transmitted between your browser and our servers uses HTTPS/SSL.
Secure storage: Our data and backups are stored using industry‑standard encryption and access controls. Passwords are hashed and salted.
Access controls: Only authorized personnel with a need to know may access personal information. We use two‑factor authentication for administrative access.
Vulnerability management: We regularly update software, monitor for security threats and perform audits.
Despite our efforts, no method of transmission or storage is 100 % secure. We cannot guarantee absolute security, but we strive to protect your information and will notify you of any data breach as required by law.
StackUp is intended for adults age 18 or older. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly. Parents or guardians who believe that their child has provided us with personal information should contact us at privacy@stackupgear.com.
We are based in the United States, and our servers are located in the U.S. If you access the Site from outside the U.S., your information will be transferred to, stored and processed in the United States. By using our Service, you consent to this transfer. If you are located in a jurisdiction with data protection laws that differ from U.S. law (such as the European Union or United Kingdom), you use the Site at your own risk.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies or legal requirements. When we make changes, we will revise the "Effective Date" at the top of this page and, if the changes are material, provide additional notice (such as posting a notice on our Site or sending a message to registered users). We encourage you to review this page periodically to stay informed about our privacy practices. Your continued use of the Site after changes become effective constitutes acceptance of the updated policy.
For questions, comments or requests regarding this Privacy Policy or your personal information, please contact us at:
StackUp
6601 S West Shore Blvd
Unit 2407
Tampa, FL 33616
United States
Support: support@stackupgear.com
Privacy Requests: support@stackupgear.com
We aim to respond to all inquiries promptly and professionally.