Legal
Privacy Policy
Last updated: September 30, 2026
Who We Are
Whittled is a brand operated by Newotics LLC, a Kentucky limited liability company. Our website is whittledco.com. Questions about this policy can be directed to matt@whittledco.com.
What We Collect
We collect only what we need to operate and improve the business:
- Email address — when you join the list or request custom puzzle updates. Used to send product updates and collection notices.
- Name — optionally provided when joining the waitlist.
- Custom puzzle photos — images you upload when ordering a custom puzzle. Used solely to produce your order.
- Order information — name, shipping address, payment details. Payment details are processed by our payment provider (Stripe) and never stored on our servers.
- Usage data — pages visited, the link or ad that brought you here, interactions, device and browser type, and general location (country/region). Vercel Analytics collects aggregated usage data. The analytics and advertising tools described below collect more, and you can turn them off.
How We Use It
- To send product updates, collection notices, and custom puzzle offers (email list)
- To fulfill and ship your order
- To produce your custom puzzle
- To improve the website and understand what content is useful
- To measure which pages and ads lead to orders, and to show our ads to people likely to care about them
- To comply with legal obligations
We do not sell your information for money. We share limited information with advertising platforms only to measure and improve Whittled's own ads, as described below, and you can turn that off.
Third Parties We Use
- Airtable — order and production records (airtable.com).
- Resend — transactional email delivery and, when you explicitly request the guide or opt in, marketing email (resend.com).
- Vercel — website hosting, anonymous analytics, and private storage for custom-order photographs (vercel.com).
- Google, Meta, Pinterest and Microsoft — analytics and advertising measurement, described in the next section.
- Cloudinary — upload and storage for optional photographs submitted with customer reviews (cloudinary.com).
- Stripe — payment processing (stripe.com). We never see or store your full card number.
Each of these providers maintains their own privacy practices. We select providers who take data security seriously.
Analytics and Advertising
We use these tools to learn which pages work and which ads lead to orders:
- Google Analytics 4 (Google) — measures visits, pages viewed, checkouts and purchases. Sets the
_gacookies. - Meta Pixel (Meta Platforms) — tells Meta when a visit from a Facebook or Instagram ad leads to a product view, checkout or purchase, so we can measure and improve those ads. Sets the
_fbpand_fbccookies. - Pinterest Tag (Pinterest) — does the same for Pinterest ads. Sets the
_epikand_pin_unauthcookies. - Microsoft Clarity (Microsoft) — records heatmaps and replays of how pages are scrolled and clicked, with page text and your uploaded photos masked, so we can fix confusing pages. Sets the
_clckand_clskcookies.
When you buy, our server may also report the purchase directly to Google, Meta and Pinterest: the order value, the product, the ad-click identifiers from your visit, and your email, phone number and ZIP code in one-way hashed (SHA-256) form. Hashing lets a platform match the purchase to an ad click without receiving your contact details in readable form. We never send your photos, gift messages or card details.
Under some U.S. state privacy laws, including California's, letting advertising platforms measure ads this way can count as "sharing" personal information for cross-context behavioral advertising. Visitors in the European Economic Area, the United Kingdom and Switzerland see none of these tools unless they choose "Allow."
Your Privacy Choices
- Your privacy choices — at the bottom of every page. Choose "Turn off" and the tools above stop loading in that browser, their cookies are cleared, and purchases you make there are not reported to advertising platforms.
- Global Privacy Control — if your browser sends this signal, we treat it as an opt-out: Meta, Pinterest and Google's advertising features never load, and your purchases are not reported to advertising platforms.
- Platform settings — you can also use the Google Analytics opt-out add-on, Meta ad preferences, Pinterest's ads personalization settings, or your browser's cookie controls.
- Ask us — email matt@whittledco.com to opt out by email or to ask what we hold about you.
Cookies
Our website uses storage required for site preferences and checkout continuity, including your privacy choice and, for up to 30 days, the link or ad that brought you here so the right campaign gets credit for an order. Vercel Analytics collects aggregated data without cookies. The analytics and advertising tools above set their own cookies only when your privacy choices allow them.
Your Rights
- Unsubscribe — every marketing email includes an unsubscribe link. Click it and you're off the list immediately.
- Access or delete your data — email us at matt@whittledco.com and we will respond within 30 days.
- Custom puzzle photos — photos you upload for a custom order are deleted from our systems after your order is produced and shipped.
Data Retention
We retain email addresses on our marketing list until you unsubscribe. We retain order information for 7 years as required by standard accounting and tax practices. Custom puzzle photos are deleted after your order ships.
Children
Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us and we will delete it.
Governing Law
This policy is governed by the laws of the Commonwealth of Kentucky, United States.
Changes to This Policy
If we make material changes to this policy, we will update the date at the top of this page. Continued use of the site after changes constitutes acceptance.
Contact
Newotics LLC DBA Whittled
Flippin, Arkansas
matt@whittledco.com