This Privacy Policy ("Policy") describes how Johnny Products LLC, a Wisconsin limited liability company ("Company," "we," "us," or "our"), collects, uses, discloses, and otherwise processes personal information in connection with our website located at johnnyproducts-usa.com and any related websites, applications, services, and platforms (collectively, the "Services"), as well as any offline services and interactions. By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with this Policy, you must discontinue use of the Services immediately.

1. Information We Collect

We collect information that you provide directly to us, information that is collected automatically when you access or use the Services, and information obtained from third-party sources. Categories of personal information collected may include, without limitation: (a) identifiers such as your name, email address, mailing address, telephone number, and account credentials; (b) commercial information, including records of products purchased, obtained, or considered, and other purchasing or consuming histories or tendencies; (c) internet or other electronic network activity information, including but not limited to browsing history, search history, page views, click-stream data, scroll depth measurements, scroll milestone events, time-on-page duration, section visibility data, element interaction data, form interaction and abandonment data (including identification of the last form field focused prior to abandonment), exit-intent signals, rage-click detection events, image zoom interactions, product configuration selections, shopping cart activity (including items added, removed, updated, and checkout initiation events), UTM campaign attribution parameters, referrer URLs, document titles, and information regarding your interaction with the Services generally; (d) geolocation data derived from your Internet Protocol ("IP") address, including approximate city, state or region, country, latitude and longitude coordinates, and timezone, obtained through third-party IP geolocation service providers; (e) device and browser information, including viewport dimensions, browser type, operating system, screen resolution, installed fonts, language preferences, and other technical characteristics; and (f) device identifiers generated through browser fingerprinting technology, as described more fully in Section 2 below.

2. Device Identification and Browser Fingerprinting

We utilize browser fingerprinting technology provided by third-party service providers to generate a probabilistic device identifier (a "Device ID") based on observable characteristics of your device and browser environment, including but not limited to canvas rendering, WebGL parameters, audio processing characteristics, screen resolution, installed plugins, timezone, language settings, and other browser attributes. The Device ID is a hashed alphanumeric string that does not, by itself, identify you personally, but enables us to recognize returning devices across multiple browsing sessions for purposes of analytics, fraud detection, and service improvement. The Device ID is combined with a timestamp to generate a session identifier for each browsing session. In the event that fingerprinting technology is unavailable or fails to load, a fallback session-based identifier is generated and stored in your browser's session storage. You may limit or prevent device fingerprinting by utilizing your browser's private or incognito browsing mode, by disabling JavaScript, or by employing browser extensions specifically designed to block or randomize fingerprinting signals. Please note that such measures may affect the functionality of certain features of the Services.

3. Geolocation Data

We derive approximate geolocation information from your IP address using third-party IP-to-location service providers. This geolocation data includes your approximate city, state or regional subdivision, country, geographic coordinates (latitude and longitude, typically accurate to the city level), and timezone. We do not request or access precise GPS-based location data from your device. Geolocation data is attached to analytics events and stored in our databases for purposes of understanding the geographic distribution of our visitors, analyzing regional purchasing patterns, and improving our Services. We may correlate geolocation data with publicly available historical weather data (including temperature, precipitation, and weather condition codes) obtained from third-party meteorological data providers, for the purpose of analyzing correlations between weather conditions and consumer behavior patterns. Such weather data is associated with your approximate city-level location and the date of your visit, not with a specific street address or precise location.

4. How We Use Your Information

We use the information we collect for the following purposes: (a) to process and fulfill orders, including to process payments, ship products, and provide order confirmations and updates; (b) to create, maintain, and secure your account; (c) to communicate with you regarding your orders, account, and our products and services, including responding to inquiries and providing customer support; (d) to send promotional communications, newsletters, and marketing materials where permitted by applicable law or with your consent; (e) to operate, maintain, improve, and personalize the Services, including to analyze usage patterns, diagnose technical issues, and develop new features and functionality; (f) to conduct analytics and business intelligence, including analyzing visitor behavior, conversion rates, product interest, geographic distribution, seasonal and weather-related purchasing patterns, and marketing campaign effectiveness; (g) to detect, investigate, and prevent fraudulent, unauthorized, or illegal activity; (h) to comply with applicable laws, regulations, legal processes, and governmental requests; and (i) for any other purpose with your consent or as otherwise permitted by applicable law.

5. Cookies, Session Storage, and Tracking Technologies

We use cookies, session storage, local storage, and similar tracking technologies to collect and store information when you access the Services. Session cookies are required for core functionality, including maintaining your shopping cart state and authentication session. We use custom analytics tracking that collects behavioral data as described in Section 1 above, which is batched and transmitted to our servers at periodic intervals (approximately every three seconds or when a batch threshold is reached) and upon page unload. We also use Vercel Web Analytics, a third-party analytics service provided by Vercel Inc., which collects aggregated, anonymized performance and usage data. You may instruct your browser to refuse all cookies or to indicate when a cookie is being sent; however, certain features of the Services, including the shopping cart and user authentication, may not function properly if cookies are disabled. The Services do not currently respond to "Do Not Track" signals transmitted by web browsers.

6. Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties for their direct marketing purposes. We may disclose your personal information to the following categories of recipients and for the following purposes: (a) service providers and contractors who perform services on our behalf, including web hosting providers, cloud infrastructure providers, database hosting providers, analytics service providers, IP geolocation service providers, and weather data providers, subject to contractual obligations of confidentiality; (b) payment processors, including Shopify Inc. and its affiliated payment service providers, to process transactions; (c) shipping and logistics companies to fulfill and deliver your orders; (d) professional advisors, including attorneys, accountants, and auditors, as necessary for the provision of their professional services; (e) law enforcement agencies, governmental authorities, or other third parties as required by applicable law, regulation, legal process, or governmental request, or as we believe in good faith is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request; and (f) in connection with, or during negotiations of, any merger, acquisition, sale of assets, financing, bankruptcy, or similar transaction involving all or a portion of our business.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. Analytics data, including page views, behavioral events, device identifiers, and geolocation data, is retained for business analysis purposes for a period that we deem commercially reasonable. Analytics data is primarily associated with anonymous device identifiers rather than personally identifiable information, unless you have created an account on the Services. You may request deletion of your personal information as described in Section 9 below.

8. Data Security

We implement and maintain reasonable administrative, technical, and physical security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including encrypted connections via Transport Layer Security ("TLS"/"HTTPS"), access controls, row-level security policies on our database infrastructure, input validation and sanitization on data ingestion endpoints, and secure cloud hosting environments. Notwithstanding the foregoing, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your personal information. You acknowledge and agree that you transmit personal information to us at your own risk.

9. Your Rights and Choices

Depending on your jurisdiction of residence, you may have certain rights with respect to your personal information under applicable data protection laws, including but not limited to the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), the Colorado Privacy Act ("CPA"), the Connecticut Data Privacy Act ("CTDPA"), and the European Union General Data Protection Regulation ("GDPR"), to the extent applicable. These rights may include: (a) the right to know what personal information we collect, use, disclose, and sell; (b) the right to request access to your personal information; (c) the right to request correction of inaccurate personal information; (d) the right to request deletion of your personal information, subject to certain exceptions; (e) the right to opt out of the sale or sharing of personal information (note: we do not sell personal information); (f) the right to data portability; (g) the right to restrict or object to processing; (h) the right to withdraw consent where processing is based on consent; and (i) the right to non-discrimination for exercising your privacy rights. You may also limit analytics tracking by using your browser's private or incognito browsing mode, by disabling JavaScript, or by using browser extensions that block tracking scripts. To exercise any of these rights, please contact us using the information provided in Section 12 below. We will respond to verifiable requests within the timeframes required by applicable law, generally within thirty (30) days of receipt.

10. Children's Privacy

The Services are not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under thirteen (13). If we become aware that we have collected personal information from a child under thirteen (13), we will take steps to delete such information. If you believe that a child under thirteen (13) has provided us with personal information, please contact us using the information provided in Section 12 below.

11. Changes to This Privacy Policy

We reserve the right to modify or update this Policy at any time in our sole discretion. If we make material changes to this Policy, we will update the "Last Updated" date at the top of this page. Your continued use of the Services after any such modification constitutes your acceptance of the modified Policy. We encourage you to review this Policy periodically for any changes.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your rights described herein, please contact us at: Johnny Products LLC, New Berlin, Wisconsin, United States. Email: support@johnnyproducts-usa.com. Telephone: (414) 850-1645.