Lid StickLift less. Stay clean.

Privacy Policy

Effective May 13, 2026

This Privacy Policy explains how Lid Stick, LLC ("Lid Stick," "we," "our," "us") collects, uses, shares, and protects personal information when you visit https://lidstick.com or join our waitlist. We comply with the California Consumer Privacy Act / CPRA (CCPA) and, for visitors from the European Economic Area, the EU General Data Protection Regulation (GDPR).

1. Who we are

Lid Stick, LLC
1209 Orange Street, Wilmington, DE 19801, United States
Email: hello@lidstick.com

2. Information we collect

  • Email address — when you join the VIP waitlist.
  • IP address — collected at sign-up to prevent abuse and for security logging. Stored alongside your contact record.
  • UTM parameters — if present in the URL when you submit the form (e.g. utm_source), so we can understand where signups come from.
  • Cookieless usage analytics (Plausible) — aggregated page views, referrers, browser/OS. No cookies, no cross-site tracking, no personal identifiers.
  • Marketing analytics (Meta Pixel / Google Ads) — only loaded after you explicitly grant consent via the cookie banner.

3. How we use it

  • To send you waitlist communications you signed up for.
  • To prevent abuse of the form (rate limiting via IP).
  • To understand traffic sources in aggregate.
  • To respond to your data-rights requests and retain records of consent.

4. Service providers

  • Loops, Inc. — waitlist contact storage and email delivery. Loops privacy.
  • Resend, Inc. — transactional email delivery. Resend privacy.
  • Vercel Inc. — site hosting and edge delivery. Vercel privacy.
  • Upstash, Inc. — Redis for IP rate-limit counters; entries evicted within 60 seconds.
  • Plausible Analytics — cookieless analytics.

We do not sell or share your personal information as those terms are defined under the CCPA. Cross-border transfers from the EEA to the United States rely on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses where applicable.

5. Retention

Waitlist contacts and associated IPs are retained until you unsubscribe or 24 months after the Kickstarter campaign closes, whichever comes first. Rate-limit logs are evicted within 60 seconds. Aggregate analytics are retained for 24 months.

6. Your rights

Under CCPA (California residents): right to know, right to delete, right to correct, right to opt out of sale/sharing (we do neither), and the right to non-discrimination.

Under GDPR (EEA / UK residents): rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time.

To exercise any right, email hello@lidstick.com. We respond within 45 days (CCPA) or 30 days (GDPR). You may also lodge a complaint with the California Attorney General or your local EU data protection authority.

7. Cookies

By default we set no cookies. Plausible analytics is cookieless. Marketing cookies (Meta Pixel, Google Ads) only load if you accept them in the consent banner.

8. Security

All traffic is encrypted in transit (TLS 1.2+). Data at rest is encrypted by our service providers. Access to production systems is limited to authorized personnel.

9. Children

The service is not directed to children under 13 (under 16 in the EEA). We do not knowingly collect data from them. Contact us to remove any such data.

10. Changes to this policy

We will post material changes here and update the effective date. For substantive changes that affect existing waitlist subscribers, we will email you in advance.