Privacy Policy
Covert X collects the minimum needed to make and ship your shirts and run your account. No advertising trackers and no data sales. Site traffic is measured with Cloudflare Web Analytics — cookieless, aggregate counts only.
Account: your email and a salted hash of your password (never the password itself). Membership and orders: size, shipping address, the last four digits and brand of your card as reported by Stripe, and your payment history. RECON: your answers to the eight questions. Studio: the designs you save and any artwork you upload. Referrals: your code and which reservations used it. If you deploy and ask us to hold or redirect boxes, the address and return date you give us.
Technical: our servers log request metadata (IP address, path, time, browser) for security, rate limiting and debugging, and the site may record a client-side error report if something breaks in your browser. These logs are pruned automatically.
To take and fulfil your order, charge renewals you agreed to, ship boxes, send the emails the service requires (confirmation, password reset, referral code, ship-date changes), review gallery submissions, and keep the site secure. RECON answers shape sizing and the designs we produce; they are reported in aggregate only.
Stripe (payments and card storage), Resend (transactional email), Cloudflare (hosting, database, network security, and Web Analytics — a cookieless script that reports aggregate traffic data such as page views and country; it does not identify you or follow you across sites). Each sees only what its job needs. We do not sell or rent personal information and we do not share it with advertisers.
One session cookie keeps you logged in. Preferences such as the studio’s ink default or guide visibility are kept in your browser’s local storage. Cloudflare Web Analytics runs without cookies. Nothing tracks you across other sites.
Write to support@covertexpression.com to see, correct or delete your data, or to close your account. Deleting an account removes your designs and RECON answers; records we must keep for tax or payment-dispute purposes are retained for the legally required period. Gallery designs you submitted that others have ordered may stay in production records under the license in the Terms of Sale.
All traffic is encrypted, the site enforces a strict content security policy, and passwords are hashed with PBKDF2. Covert X is for adults; we do not knowingly collect information from anyone under 18.
Covert Expression, LLC, Las Cruces, New Mexico. support@covertexpression.com. We may update this policy; the effective date below changes when we do.
EFFECTIVE OCTOBER 29, 2026