01Who this policy covers
This policy explains how FixTheSTI (FixTheSTI.com), a sole proprietorship in Virginia, handles information about people who visit the site, ask a question, or buy a panel or a spot on the supporters band. “I” and “me” mean the owner of FixTheSTI. Questions go to sponsor@fixthesti.com.
The short version: I collect only what I need to answer you, take your payment and put your name or logo on the car. I don’t sell it, I don’t run ads or analytics trackers, and the site sets no cookies of its own.
02What I collect
When you ask a question
The sponsor, partner and supporter forms collect your name or business name, your email, your message, and the panel or partner type you’re asking about. Partner forms can include a link to your website. Sponsor forms can include a logo file, but only if you add one; a logo you preview on the car stays in your browser until you choose to send it.
When you pay
Checkout runs on Stripe. Stripe collects your card or bank details, billing country and postal code; I never see or store your full card or bank numbers. Stripe shares with me your name, email, what you bought, the amount, the payment status, and the last digits and type of the card, so I can match payments to orders. For supporters, it also passes the name or @handle you entered for the window.
Automatically
Like any website, the hosting provider (Netlify) receives your IP address, browser type and the pages requested, for security and to deliver the site. When you start a checkout, I use a one-way, salted hash of your IP address to limit repeated attempts; the readable address is never stored, and the hash is only used within a 10-minute window.
The site uses no analytics, advertising or social-media trackers and sets no cookies of its own. Stripe’s checkout page, which is on stripe.com, sets its own cookies for fraud prevention under Stripe’s privacy policy.
03How I use it
- To reply to your questions and send you what you asked for.
- To take payment, issue receipts and refunds, and approve or decline supporter names.
- To produce and install your decal: your artwork, business name and placement details go to the print and install shop.
- To show sponsors and supporters on the site and the car, which is the point of the purchase (see section 4).
- To keep records the law requires, such as payment records for tax, and to prevent fraud and abuse.
I don’t use your information for marketing, and I won’t add you to a mailing list.
04What becomes public
Some information is public by design, because that’s what you’re paying for:
- Panel sponsors: your business or display name and logo appear on the car and on FixTheSTI.com, with a link to your website if you give one, and may appear in videos and social posts about the build.
- Supporters: the name or @handle you enter appears on the rear window and on the site after I approve it. Until then the spot only shows “In review”.
Your email, payment details and messages are never published. Use a handle instead of your real name on the band if you prefer.
06How it’s protected
- The whole site is served only over HTTPS, with strict transport security and a content security policy.
- Card and bank details go straight to Stripe, which is certified to PCI DSS Level 1. They never reach this site’s servers.
- Payment keys are kept on the server, never in the page. Payment notifications from Stripe are verified by signature before anything is recorded.
- Order data and form submissions sit in accounts protected by strong passwords and two-factor authentication, and only I have access.
- Checkout attempts are rate-limited to block automated abuse.
No system is perfectly secure, but if a breach ever affected your information, I would tell you and take steps to fix it.
07How long I keep it
- Questions and logo uploads: deleted within 12 months after the campaign ends, sooner if you ask.
- Payment records: kept as long as tax law requires, which is typically several years.
- Names on the site: removed from the site when the campaign ends, or sooner if your purchase is refunded.
08Your choices
You can ask me to show you, correct or delete the information I hold about you by emailing sponsor@fixthesti.com. I’ll respond within 30 days. I may need to keep payment records the law requires, and I can’t remove a decal mid-term without the refund rules in the sponsorship terms applying.
This site isn’t directed at children under 13, and I don’t knowingly collect their information.
09Changes and contact
If this policy changes, the date at the top will change with it. Significant changes will be noted on the site.
Email: sponsor@fixthesti.com
Business: FixTheSTI, a sole proprietorship in Virginia