Father Approves, Inc.
Effective Date: January 23, 2026
You clicked in. Congratulations. You’ve now entered the domain where we log your every polite poke around the site. Don’t panic—we’re not turning your browsing into a psychological profile to sell to advertisers. We’re too busy keeping the lights on and the bots out. But let’s not pretend: we see what you do here. Here’s the unfiltered rundown.
1. The Surveillance We Actually Run (Because the Internet Demands It) We could fingerprint your hardware, track pixel-by-pixel hesitation on that “Buy Now” button, correlate your IP with every dark corner of the web. Instead, we do the bare-minimum necessary evil:
- Traffic & Threat Logs — IP address, browser fingerprint (type, version, OS), pages hit, timestamps, rough geo (city/region, not your couch coordinates). Cloudflare hoovers this up to smash DDoS attempts, malware injections, and script-kiddie tantrums. Without it, the site dies in minutes.
- Checkout Reality — Name, email, billing/shipping address, phone (if you bother), order contents, notes. WooCommerce shoves this into our database so your package doesn’t vanish into the void.
- Payment Shadows — We never touch your card number. PayPal locks that away in their fortress. If they get breached, that’s their funeral, not ours.
- Account Trap — Optional login: email, username, hashed password (we don’t even want to know the plaintext), past orders, saved addresses. Convenience tax.
- Analytics (The Non-Psychotic Kind) — Koko Analytics counts views, sessions, referrers, devices. Zero personal IDs, zero cross-site stalking, zero ad-network feeding. Just cold numbers telling us if anyone’s actually here or if we’re yelling into the abyss.
- Anti-Spam Bouncer — IP, email, message text, user agent from forms/reviews/comments. Spam tools flag and block the garbage so real inquiries don’t drown.
- Cookies & Ghosts — Essential only: cart survival, login sessions, Cloudflare security tokens. No behavioral trackers, no third-party spies. Nuke them if you want—your browser won’t cry.
We skip the fun stuff: no device graphing beyond basics, no eternal profiles, no data brokerage side hustle.
2. Why We Bother (The Grim Necessities)
- Keep Cloudflare’s shields up so the site doesn’t become a graveyard.
- Fulfill orders without turning shipping into a guessing game.
- Block fraudsters, spammers, people named Joe, and credential-stuffers before they ruin it for everyone.
- Let repeat buyers skip re-entering details (lazy efficiency).
- Spot site rot via anonymous stats—no soul-selling required.
- Dodge legal bullets (tax records, subpoenas, the usual).
3. Who We Leak To (The Reluctant Accomplices) No auctions, no dark-web trades, no “strategic partnerships” that enrich faceless corps.
Only these:
- Cloudflare — They drink the logs to protect us. Read their policy if you want nightmares: cloudflare.com/privacypolicy.
- PayPal — They handle the money handoff. Their rules govern your card ghosts.
- Shipping Minions — Address/name so your box lands somewhere real.
- Anti-spam & Hosting Goons — Tiny slivers of data to filter trash and keep servers breathing.
- Courts & Cops — If a badge flashes paperwork, we comply. We’re not martyrs.
- Contracted Tools — Email senders, backups—bound by NDAs and deletion clauses.
That’s the full list. No one else gets a peek unless the law kicks in the door.
4. How Long We Hoard the Evidence
- Orders/accounts: 7 years (taxman insists) or until you beg for deletion (we erase what we legally can).
- Cloudflare logs: Weeks/months, then vaporized.
- Koko stats: Aggregated forever (no ties to you after the short window).
- Spam/block lists: Eternal for persistent pests. (I see you Steven!)
- Failed attacks: Short-term memory to stop round two.
5. Your Illusory Rights (Use Them Before We Change Our Minds)
- Demand to see your file (email us—be precise).
- Fix typos in your data.
- Beg for deletion (legal retention laughs last).
- Whine about processing (we’ll note it lol).
- Export your order history.
- Snitch to a data watchdog if we’re sloppy.
For GDPR/CCPA warriors: small US shop, but we play semi-nice. Hit us up.
6. Security Theater HTTPS blanket, access locks, patches, Cloudflare walls. We’re not invincible—nothing is. If hackers crack us, you’ll hear about it fast (probably via a frantic email).
7. Borders & Jurisdiction Games US-based, Data bounces through Cloudflare/PayPal nodes worldwide. US privacy laws are a joke compared to some places—standard clauses apply where we must.
8. Policy Mutations We tweak when laws evolve, plugins shift, or boredom strikes. Date at top tells the tale. Keep using the site = you consent to updates. Major pivots? We’ll poke you with a banner or email.
9. Reach Out (If You Dare) Paranoia spike? Want proof we’re not secretly logging your soul? Email: [email protected]
Bonus for enduring this screed: code NOTASPY5 for 5% off at checkout. Tell no one.
We could be worse. We’re not. Yet.
Father Approves, Inc.