Privacy Policy

Last updated and effective October 13, 2026

This Privacy Policy describes how Steelshort LLC, a California limited liability company ("SteelShort," the "Company," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information when you visit our website at steelshort.com (the "Website"), use our mobile applications for iOS and, when available, Android (each an "App," and together the "Apps"), or otherwise use our video streaming service (together with the Website and the Apps, the "Services," which our Terms call the "Service"). "You" means the individual using the Services. "Personal information" means information that identifies you or that can reasonably be associated with you, your browser, or your device. Capitalized terms that this Privacy Policy does not define, such as "Coins" and "Everything Unlock," have the meanings given in our Terms of Service (the "Terms"). Please read this Privacy Policy carefully. When you create an account, or make a purchase that creates one, you are asked to agree to it and to our Terms, as described in Section 2 of the Terms; by accessing or using the Services, you acknowledge that you have read and understood it.

Who we are. Steelshort LLC decides how your information is used and is responsible for it, including information collected through our Apps. Where a privacy law uses a term such as "business" or "controller," it means Steelshort LLC. While our Apple account moves to Steelshort LLC, the App Store names our founder, Brooks Taylor, as the iPhone App's developer. He publishes it under a license from Steelshort LLC, and Steelshort LLC handles any information Apple gives that account about your purchases under this policy.

Our Apps. Our Apps send the information they collect to our own servers. Apart from that, the Apps themselves send information only to Apple or Google: to complete a sign-in, purchase, or restore that you ask for, and, on iPhone, the one-time install report described in Section 1.4, which identifies no one. Our Apps contain no advertising, analytics, or tracking software from other companies, and they send nothing to Meta or to any other advertising company; if an ad led you to install the App, Apple, not the App, may tell the company that showed the ad that it led to an install, without identifying you (Section 1.4). The sharing with Meta described in this Privacy Policy happens only on our Website.

Successor Service. We expect to replace the Services with a new version of SteelShort with more series and features (the "Successor Service," as our Terms define it). Section 4 describes how your information may be carried into the Successor Service. This Privacy Policy, as amended under Section 11, governs your information until a privacy policy for the Successor Service applies to you as described in Section 11.

Notice at Collection (California)

This notice covers the Website and the Apps. It summarizes the categories of personal information we collect, why we collect them, whether we sell or share them (including with Meta Platforms, Inc. ("Meta"), which operates Facebook and Instagram), and how long we keep them. Sections 1, 2, 4, 6, and 7.2 give the details.

Identifiers

• What we collect: Your email address; your name, if you give one; your account ID (a random code we assign to your account); your Google or Apple sign-in identifier; your IP address; your browser type; the random code our App creates on your device (Section 1.4); the numbers Apple, Google, or Stripe give your purchases; and, on the Website, the daily visitor code (Section 1.4), Meta's cookie identifiers, and the identifier of a Meta ad click.
• Why we collect it: To create and run your account, sign you in, complete your purchases, and, in the Apps, restore them on another device; for security and to prevent fraud; to understand how the Services are used; on the Website, to measure our advertising on Meta and to show our ads on Facebook and Instagram to people likely to be interested in the Services; and, if we send emails about new episodes, to tell you about them (every such email lets you unsubscribe).
• Sold or shared? Not sold for money, but the sharing with Meta described here may count as a "sale" under California and other state laws (Section 7.2). On the Website only, unless you opt out, shared with Meta: for accounts made on the Website, a hashed (coded) copy of your email address and account ID where we have them, which Meta can use to identify you; your IP address; your browser type; Meta's cookie identifiers; the identifier of a Meta ad click; and, with Everything Unlock checkout events, the daily visitor code. When you buy in an App while signed in to an account that has a password, uses Google or Apple sign-in, or holds a Website purchase, the App gives Apple or Google your account ID so that the purchase is saved to that account (Section 4); it is not sold to them or shared with them for advertising.
• How long we keep it: Account information, including your account ID and Google or Apple sign-in identifier: while you have the account, then removed within 30 days. IP address: up to 30 days in server logs. IP address and browser type stored with the record of a Website checkout at Stripe: for as long as Stripe keeps that record under its own retention policy and legal obligations, unless you ask us to delete them (Section 6). The daily visitor code and the App's random code: with the usage events they accompany, up to 24 months (Section 6); the daily visitor code also stays, in the same way as IP address, with the record at Stripe of an Everything Unlock checkout opened on Stripe's checkout page. Purchase numbers: as stated for commercial information below. Meta's cookies: 90 days. The ad-click identifier: two days on our servers (copies in our backups about seven more); if you start a checkout, it can also stay, in the same way as IP address, with that checkout's record at Stripe, and be copied into Meta's 90-day _fbc cookie (Sections 4 and 6).

Sensitive personal information

• What we collect: Your account log-in, meaning your email address together with your password (the password is stored only as a one-way hash).
• Why we collect it: To sign you in.
• Sold or shared? Not sold or shared.
• How long we keep it: While you have the account.

Commercial information

• What we collect: What you bought, when, and for how much; your Coin balance and history; the episodes you unlocked; checkouts you started and taps on a button to buy the Everything Unlock; and when and how you accepted our Terms and this Privacy Policy.
• Why we collect it: To give you what you bought and keep your balance and access correct; for accounting and tax; to prevent fraud; to keep a record of what you agreed to; and, on the Website, to measure our advertising on Meta and to show our ads on Facebook and Instagram to people likely to be interested in the Services.
• Sold or shared? Not sold for money, but the sharing with Meta described here may count as a "sale" under California and other state laws (Section 7.2). Website purchases, checkouts started, and taps on a button to buy the Everything Unlock are shared with Meta unless you opt out; purchases made in our Apps never are.
• How long we keep it: While you have the account, then deleted with it, except usage events recorded while you were not signed in, which are kept up to 24 months. Our records at Stripe for Website purchases stay after you delete your account, for as long as Stripe keeps those records under its own retention policy and legal obligations, unless you ask us to delete them, and payment confirmation numbers that nothing in our records links to you are kept for as long as we operate the Services (Section 6).

Internet or other electronic network activity

• What we collect: Pages and screens viewed; the website that referred you (its domain name only) and the campaign tags in the link you followed; the type of browser and device you use; how you use our offers, prompts, and buttons; sign-ups and sign-ins; App crash reports and diagnostic information (the App's version and, on iPhone, its build number, your device's operating system version, episodes that failed to load, and launches during which our servers were slow to respond); and server logs.
• Why we collect it: To run, secure, and improve the Services; and, on the Website, to measure our advertising on Meta and to show our ads on Facebook and Instagram to people likely to be interested in the Services.
• Sold or shared? Not sold for money, but the sharing with Meta described here may count as a "sale" under California and other state laws (Section 7.2). On the Website only, unless you opt out, shared with Meta: visits to our home, sign-in, sign-up, and checkout-forwarding pages (the "checkout-forwarding page" is the page that sends you on to Stripe's checkout page when you buy the Everything Unlock; Section 1.4) and the address of the page you came from, and the fact that you started a second or later episode of a series or reached the end of a series' free episodes, never which series or episode.
• How long we keep it: Up to 24 months, and deleted with your account if recorded while you were signed in; server logs up to 30 days.

Viewing information (under the CCPA, commercial information and internet or other electronic network activity information)

• What we collect: The episodes you start, how far you watch, the episodes you finish, and your playback position.
• Why we collect it: To resume playback, show you what to watch next, determine what you have unlocked, complete a purchase you start from an episode, and understand, in aggregate, how the Services are used; and, if we send emails about new episodes, to tell you about new episodes of series you watch.
• Sold or shared? Not sold for money. Not shared, except that viewing can trigger the fact described under internet or other electronic network activity above, which never names a series or episode (Section 4(c)) and, as part of the sharing with Meta, may count as a "sale" under California and other state laws (Section 7.2). We give our payment processor the address of the episode you buy from, so that it can return you there (Section 4).
• How long we keep it: Your playback position: until you delete your account. Records of episodes started, watched, and finished: up to 24 months, and deleted with your account if recorded while you were signed in (Section 6).

Messages you send us (under the CCPA, identifiers, and any other category of information you choose to include)

• What we collect: What you write to us and the address you write from.
• Why we collect it: To answer you and keep a record of your request and our response.
• Sold or shared? Not sold or shared.
• How long we keep it: Up to three (3) years after our last reply, then deleted (Section 6).

Sources. We collect personal information from you; automatically from your browser or device (Section 1.4); from Google or Apple, if you sign in with them; from Stripe, Apple, and Google when you make a purchase (Section 1.2), and from Apple and Google if a purchase made in an App is later refunded or cancelled; and, on the Website, from Meta's cookies and from the ad-click identifier that Meta adds to links in its ads (Section 4).

Sharing with Meta. We share personal information with Meta, which also collects it directly through its pixel on our home, sign-in, sign-up, and checkout-forwarding pages, for cross-context behavioral advertising, which California law calls "sharing." We do not sell personal information for money, but this sharing may count as a "sale" under California and other state laws. To opt out, use Your Privacy Choices, linked at the bottom of the Website's pages (on a phone, that link is hidden while an episode is playing) and always available at steelshort.com/privacy-choices, or turn on the Global Privacy Control signal in your browser (Section 7.2). If you are signed in when you opt out, it applies to your account on every browser and device where you sign in.

1. Information We Collect

1.1 Information You Provide to Us

Account information. When you register for an account, we collect your email address, a password, your display name (if you choose to provide one), and the date of registration. If you sign up in the player with only your email address, the account has no usable password until you choose one through "Forgot password." Passwords are stored only as a one-way cryptographic hash; we cannot view your password in readable form. If you buy the Everything Unlock on the Website without being signed in, we create or locate your account using the email address, and the name if you give one, that you enter at checkout. An account created this way has no usable password until you choose one, either on the screen shown to you right after your purchase or later through "Forgot password"; where that screen offers it, you can instead connect a Google account to it (Section 2 of the Terms).

Accounts created by an in-app purchase. If you buy an unlock in one of our Apps without being signed in, we create an account for you automatically. You do not have to give us your name, email address, or a password. Behind the scenes, our system gives the account a made-up email address that only the system uses. We never show it to you, and we never send anything to it. The account is linked to your purchase by the number Apple or Google gives us for that purchase (Section 1.2), and to your device because the App stays signed in to it (Section 1.4). If you tap Restore purchases on a device that is not signed in, we use that number to sign the device back in to the account. This stops once the account has a password, uses Google or Apple sign-in, or has a purchase made on the Website. If you add an email address in the App, we store it on the account and email it a link to choose a password; until a password is chosen, you can change the address or have the link sent again. If, while the App uses such an account, you sign in to another SteelShort account from the App, everything held by the App's account is moved to the account you signed in to, and the App's account is deleted. The same happens if, while you are signed in, you restore a purchase saved to another account created by an in-app purchase.

Third-party sign-in information. If you sign in using Google or Apple, we receive the stable identifier that provider assigns to your account (your "sign-in identifier"), together with the email address and name the provider shares with us, and a token used to confirm the sign-in. If you use Sign in with Apple in one of our Apps, we may also keep a token from Apple, which we use only to ask Apple to disconnect SteelShort from your Apple Account when you delete your account on the Website or in one of our Apps. You can also disconnect SteelShort from your Apple Account yourself at any time, in your Apple Account settings under Sign in with Apple. We do not receive your Google or Apple password, and we do not obtain access to any other content in those accounts.

Acceptance records. When you accept our Terms and this Privacy Policy, including by making a purchase, we record the version accepted, a description of how and where you accepted it (for example, on the Website or in an App), including the statement shown to you, a cryptographic fingerprint (hash) of the text of the documents you accepted, and the date and time.

Communications. If you contact us, we collect your email address and the information you choose to provide in your message.

1.2 Payment and Transaction Information

When you make a purchase, whether of Coins or of an unlock such as the Everything Unlock, we collect and maintain records of what you purchased, at what price, and when; your Coin balance, together with a ledger entry for each credit and debit, including Coins issued without charge; and records of the episodes you have unlocked. For purchases on the Website, we also hold the customer identifier and payment identifiers assigned by our payment processor, Stripe, Inc. ("Stripe"). For purchases in our Apps, we hold the transaction or order identifier and product identifier that Apple's App Store or Google Play reports to us, and whether the purchase was made in the store's live or test environment. We do not collect, receive, or store full payment card numbers, expiration dates, or security codes from any channel. Payment card information is provided directly to Stripe, Apple, or Google and is governed by that company's privacy policy. The Services offer no subscriptions, so we hold no recurring-billing records.

1.3 Viewing Information

To operate the Services, we keep records of the episodes you start, how far into each episode you watch, the episodes you finish, and your playback position (together, "viewing information"), so that you can resume where you left off and so that the Services can show you what to watch next. Our Apps also keep, on your device only, a note of the last episode you watched, so that the App can reopen it. Viewing information receives the specific protections described in Section 3.

1.4 Information Collected Automatically

Cookies and similar technologies. Our own cookies and browser storage, listed in Section 5, keep you signed in, secure the sign-in process, and remember a few choices and offers on your browser. In addition, unless you have opted out, Meta sets two advertising cookies, described in Section 5, only on the Website's home page, its sign-in and sign-up pages, and the page that forwards you to our payment processor's checkout page when you buy the Everything Unlock (the "checkout-forwarding page"). On the checkout-forwarding page, we may set one of those cookies, _fbc, ourselves (Section 4). No advertising cookie is set on a series page, an episode page, or the player. When our servers send the events described in Section 4(b) and (c), they read Meta's cookie identifiers if your browser already has them. Where you pay with Apple Pay on the paywall, Stripe may set its own cookies needed to process the payment securely (Section 4).

Mobile apps. Our Apps store your sign-in session in your device's secure storage rather than in a cookie. The first time an App runs on a device, it creates a random identifier (not a hardware identifier). On an iPhone it is kept in the device's keychain, so it can remain if you delete and reinstall the App; the App replaces it with a new one if you delete your account in the App. It accompanies the usage events and crash reports the App sends to us; if you are signed in, those events are also associated with your account. Usage events describe how the App is used, such as the App being opened, screens opened, episodes started and finished, how far into an episode you watched, the offers shown to you and the buttons you tap on them, any answer you give when we ask why you did not buy, shares, sign-ins, and purchases begun and completed. Every event also carries the App's version (and, on iPhone, its build number) and your device's operating system version. Crash reports describe the failure, with email addresses and credentials removed before they leave your device; the App also reports, as diagnostic information, episodes that failed to load and launches during which our servers were slow to respond. The App starts sending these events the first time it is opened, whether or not you are signed in. You can stop them at any time by turning off Share app usage statistics on the App's Account tab (Section 7.1); we still keep the records we need to provide the Services, such as your purchases and, if you are signed in, your playback position. These go only to our own servers; the Apps contain no third-party analytics, advertising, or tracking software.

Install reporting on iPhone. On iPhone, the first time the App is opened after it is installed, it tells Apple's own ad-measurement system (SKAdNetwork / AdAttributionKit) that it was opened. If you installed the App after tapping an ad, such as one on Facebook or Instagram, Apple, not us, later tells the company that showed the ad that the ad led to an install. That report contains nothing that identifies you, your device, or your account, and we never report what you watch or buy in the App this way.

Usage measurement on the Website. Our own servers record a limited set of usage events so that we can understand how the Services are used: pages viewed; the website that referred you (its domain name only) and any campaign tags in the link you followed; the type of browser and device you use (for example, Facebook's in-app browser on an iPhone); whether you interacted with a page; whether an episode started playing, with or without sound, and how long it took to start; episodes started, how far into each episode you watched, and episodes finished; the offers and sign-up prompts shown to you, the buttons you tap on them, whether you started typing in a sign-up prompt's email field and, if you submitted it, whether it was accepted, was not a valid address, or already belonged to an account (the event never records what you typed), whether Apple Pay is available on your device, and any answer you give when we ask why you did not buy; sign-ups and sign-ins; and purchases and unlocks. For signed-in users, these events are associated with your account. For visitors who are not signed in, they are associated only with a code derived from your IP address, browser type, and the current date, which changes every day (the "daily visitor code"). We do not store your IP address with these events, and we do not use the daily visitor code to work out your address. These events are held on our own systems and are not shared with any third party, except that on the Website, unless you opt out (Section 7.2): starting a second or later episode of a series, or reaching the end of a series' free episodes, can cause the single "viewed content" or "reached the paywall" event sent to Meta described in Section 4(c); and tapping a button to buy the Everything Unlock, starting a checkout, and completing a purchase cause the events described in Section 4(b), of which the "checkout started" events for the Everything Unlock carry the daily visitor code. None of them names the series or episode. These events are deleted after twenty-four (24) months.

Server logs. Our servers keep technical logs for security, fraud prevention, rate limiting, and troubleshooting. They can include your account ID, the identifiers of your purchases and checkouts, and, if an email to you could not be sent, your email address. Our hosting provider's records of connections to our servers can also include IP addresses.

Usage and analytics data. We may collect information about how the Services are used, such as the pages and screens you open, the features you use, the actions you take (for example, reaching a paywall or making a purchase), the time and duration of your visits, and technical details about your device and browser, using our own systems and, as permitted by applicable law, analytics tools and service providers acting on our behalf. Where the law of your jurisdiction requires consent before such tools are used, we will obtain it first. We do not sell this data for money and will not. We do not use it for advertising, except for the Website events sent to Meta described in Section 4 (taps on a button to buy the Everything Unlock, checkouts started, purchases, and the "viewed content" and "reached the paywall" events), which you can opt out of (Section 7.2). Where usage data identifies the video content you request or obtain, it is treated as viewing information under Section 3.

2. How We Use Information

We use the information described in Section 1 for the following purposes:

• to create, maintain, secure, and authenticate your account, including reopening an account created by an in-app purchase when that purchase is restored, and joining it to the account you are signed in to when you sign in or restore its purchase;
• to process purchases, deliver unlocked content, maintain accurate balances and entitlements, and prevent fraud and abuse (including the creation of duplicate accounts to obtain promotional Coins repeatedly);
• to remember your playback position across devices and show you what to watch next;
• to respond to your questions and requests, including requests to exercise your privacy rights;
• to communicate with you about your account, your purchases, and changes to the Services, including the transition to the Successor Service, and to carry your account into the Successor Service as described in Section 4;
• to comply with legal obligations, including tax, accounting, and consumer-protection requirements;
• to understand how the Services are used and to monitor and improve their performance, reliability, design, and content, using server logs, aggregate viewing statistics, and the usage and analytics data described in Section 1.4;
• to measure whether our advertising on Meta's platforms (Facebook and Instagram) leads to visits, continued viewing, reaching the paywall, taps on a buy button, checkouts, and purchases on the Website, and to show our ads to people likely to be interested in the Services, as described in Section 4 (Advertising partner), unless you opt out (Section 7.2).

Where the law of your jurisdiction so requires, we process personal information on the following legal bases: performance of our contract with you; our legitimate interests in operating, securing, and improving the Services; compliance with legal obligations; and your consent, where consent is required.

3. Video Viewing Information

We treat records of the video content you request or obtain as sensitive information. The federal Video Privacy Protection Act and some state laws give those records special protection.

We do not disclose to any third party, for advertising or marketing purposes, which series or episodes you select, request, or watch, or your watch history. We do not permit third-party advertising or tracking scripts to run on a series page, an episode page, or the player, on any page whose address names a series or episode, or in our Apps. Meta's pixel runs only on the Website pages named in Section 4 and is limited as described there. These limits apply to what we send and what we allow on our pages; they cannot control the Facebook or Instagram app's built-in browser, which is Meta's software (Section 4). The only viewing-related fact we share for advertising is the one described in Section 4(c). Measurement of how the Services are used on series pages, episode pages, and the player is performed by our own systems. Our hosting and backup providers (Section 4) store viewing information for us, as part of our database. If we engage an analytics provider, we will not give it information that identifies you, such as your email address, account ID, or a device or cookie identifier, together with the series or episodes you request or watch, unless you have given the separate consent described below.

We use viewing information to provide the Services to you: resuming playback, displaying continue-watching functionality, determining your entitlements, completing a purchase you start from an episode (including telling our payment processor which episode to return you to, as described in Section 4), and, if we send emails about new episodes and you have not unsubscribed from them, telling you about new episodes of series you watch. We also use it, in aggregate, to understand how the Services are used (Section 2), and we may publish or share aggregate figures that never identify you or what you watched (Section 4, "Aggregated information"). On the Website, unless you have opted out, starting a second or later episode of any series, or reaching the end of a series' free episodes, can trigger the "viewed content" or "reached the paywall" event described in Section 4(c). That event tells Meta that it happened, together with the identifiers listed there, but never which series or episode.

If we ever propose to disclose your viewing information to any third party for any purpose not described above, we will first obtain your separate, informed, express written consent, in a form distinct and separate from this Privacy Policy and from our Terms, and you will be able to withdraw that consent at any time. Accepting this Privacy Policy or our Terms is not that consent, and we will not seek such consent through a general update to either of them. Any consent given in advance will last no longer than two (2) years, as federal law requires.

4. How We Disclose Information

We disclose personal information only as described in this Section 4.

Service providers. We disclose personal information to the vendors listed below, which process it on our behalf to provide services to us. Each receives the information described below for the services it provides to us. Each of them has agreed in writing, when acting as our service provider, to keep that information confidential and secure and to use it only to provide its services to us or as the law requires. We give personal information, including information collected through our Apps, to a service provider only under such a written agreement, so that it receives the same or equal protection as this Privacy Policy describes. None of them is permitted to use your information for its own marketing purposes. Stripe also uses some of the payment information it handles for us as an independent business, for its own purposes such as detecting and preventing fraud, meeting its legal obligations, and improving its services, as described in Stripe's privacy policy (see "Independent third parties" below). Our service providers are:

• Stripe, Inc. — payment processing, refunds, and payment records for purchases on the Website, as described in the next paragraph;
• Resend — delivery of transactional email, such as password resets and purchase confirmations, for which it receives your email address and the content of the email. Resend also keeps records of the emails it delivers for us, such as the sending and receiving addresses and whether each was delivered, and uses those records as an independent business to run, secure and improve its service, under its own privacy policy;
• Google LLC — Google Workspace, which hosts our email accounts (such as support@steelshort.com and privacy@steelshort.com), so the messages you send us, and our replies, are stored by Google for us;
• Fly.io, Inc. — hosting: the servers in the United States on which the Services run, and on which our database and video files are stored;
• Tigris Data Inc. — storage of the continuous backup copies of our database;
• analytics providers, if and when we engage them, under contracts that limit their use of the data to providing services to us and prohibit any sale of it; we will name them here when engaged.

Stripe and Apple Pay on the paywall. Where you can pay with Apple Pay on the paywall itself, Stripe's payment script runs on Apple devices from the last free episode before the paywall and while the paywall is shown, to check in advance that Apple Pay is available and to process the payment. Once it has started, it stays loaded until you close or reload the page, even if you then swipe back to earlier episodes or go elsewhere on the Website. Like any web request, loading it gives Stripe your IP address and your browser type, and the script can see the address of the page it runs on, which names the series and episode. The script is loaded with Stripe's optional fraud-detection signals turned off, is used by us only for payment, and is not an advertising or tracking technology. Stripe may set its own cookies needed to process a payment securely. When you start a purchase from an episode, we give Stripe the address of that episode so that it can return you there; Stripe keeps it with its record of the payment, which includes your email address. Unless you have opted out of advertising sharing (Section 7.2), we also store your IP address, browser type, and Meta's identifiers with each Website checkout at Stripe, so that our server can report the purchase to Meta when Stripe confirms it (item (b) below). Section 6 lists what stays with Stripe and for how long.

Sign-in providers. If you choose to sign in with Google or Apple, Google LLC or Apple Inc. confirms your identity to us and shares the information described in Section 1.1. We give them only what is needed to complete the sign-in and, for Apple, to disconnect SteelShort from your Apple Account when you delete your account on the Website or in one of our Apps.

Advertising partner. We share a limited set of personal information with Meta, which operates Facebook and Instagram, so that we can measure whether our advertising on Meta's platforms results in visits, continued viewing, and purchases, and so that we can reach people who have shown interest in the Services. This happens only on the Website, never in the Apps, and only if you have not opted out, either on the browser you are using or on your account (Section 7.2). Specifically:

• (a) Meta's pixel. On the home page, the sign-in and sign-up pages, and the checkout-forwarding page only, Meta's pixel receives, directly from your browser, the address of that page and of the page you came from (if you came from another of our pages, only our site's address, never which page), your IP address, information about your browser and device, and Meta's own cookie identifiers. On the checkout-forwarding page, it also receives the price and type of the item you are about to buy and the daily visitor code (Section 1.4; see (b)).
• (b) Buy-button taps, checkouts, and purchases. When you tap a button to buy the Everything Unlock (Apple Pay, Pay with card, or Keep watching), when you start a checkout, and when a purchase of Coins or of the Everything Unlock on the Website is completed, our servers send Meta the amount, the item purchased or offered, the time, a hashed (coded) copy of your email address and of your account ID where we have them and the account was not created in one of our Apps (this lets Meta match the event to your Facebook or Instagram account, if you have one, and to other events we send about you), your IP address, your browser type, Meta's cookie identifiers, and, if you arrived from a Meta ad, the identifier of that ad click. Each tap on one of those buttons sends Meta a "checkout started" event, even if you then cancel or the payment does not go through. Those buttons are on episode pages, but the event is sent by our server, not by Meta's pixel; the only web address it gives Meta is our home page's, and it never names the series, the episode, or the page you were on. The "checkout started" events for the Everything Unlock, including the one Meta's pixel reports under (a), also carry the daily visitor code (Section 1.4), so that Meta can tell that they came from the same browser on the same day.
• (c) "Viewed content" and "reached the paywall." When, on the Website, you start a second or later episode of a series, and when you reach the end of a series' free episodes, our servers send Meta a single "viewed content" or "reached the paywall" event, respectively, normally no more than once a day for the same browser. The event carries only the fact that you kept watching or reached the paywall, together with the identifiers in (b) other than the ad click and the daily visitor code (it may include Meta's _fbp cookie identifier, but never its _fbc cookie, which can hold the ad click).

If your account was created in one of our Apps (including an account created by an in-app purchase, even after you add an email address or choose a password), we never send Meta its email address or account ID, or a hash of either, including when you use that account on the Website.

We never tell Meta which series or episodes you have watched, requested, or unlocked. Meta's pixel never runs on a series page, an episode page, or the player, or on any page whose address names a series or episode: it is not loaded on those pages, and if you go to one of them from a page where it was loaded, it is switched off and reports nothing about them. It does run on our home page, which lists our series (and, if you are signed in, the episodes you were watching), but there it reports only that the home page was visited, not what the page shows or what you tap. If you came to us by tapping a Meta ad, Meta already knows which ad you tapped, and so which series that ad promoted; when we send that ad click with a buy-button tap, a checkout, or a purchase (item (b)), Meta can connect it to that ad.

The ad-click identifier. When you arrive from a Meta ad, Meta adds an identifier of that ad click to the link. If you land on an episode page, that page passes it to our own server; no Meta code runs there. (If you land on the home page, Meta's pixel there keeps it in Meta's _fbc cookie.) We keep it on our servers for two (2) days, under a one-way hash of your IP address and browser type, and then delete it (copies can remain in our backups for about seven more days). We use it for the buy-button, checkout, and purchase information in (b), and never include it with the events in (c). If you start an Everything Unlock checkout within those two days, a copy stays with that checkout's record at Stripe (Section 6), and, if the checkout is on Stripe's checkout page, the checkout-forwarding page also copies it into Meta's _fbc cookie on your browser, unless that cookie is already there. That cookie lasts ninety (90) days: Meta's pixel reads it on the pages where the pixel runs, and our servers send it to Meta with later buy-button taps, checkouts, and purchases.

Meta's use and your choice. Meta uses this information under its own privacy policy, including for cross-context behavioral advertising, which the CCPA treats as "sharing." You may opt out at any time through Your Privacy Choices, linked at the bottom of the Website's pages (on a phone, that link is hidden while an episode is playing) and always available at steelshort.com/privacy-choices, or by enabling the Global Privacy Control signal in your browser; if you are signed in when you do, or later sign in on that browser, your choice applies to your account on every browser and device where you are signed in (Section 7.2).

App store operators. When you make a purchase inside one of our Apps, Apple (App Store) or Google (Google Play) collects the payment for the seller under its own terms, as an independent business and not as our service provider; the information it collects about that purchase is governed by its own privacy policy. If, when you buy, the App is signed in to an account that has a password, uses Google or Apple sign-in, or holds a Website purchase, the App also gives the store your SteelShort account ID (a random code that contains nothing about you, and never your name or email address); the store returns it to us with the purchase so that we save the purchase to that account, and Google may also use it to detect unusual purchase activity. The store shares with us only the purchase confirmation described in Section 1.2 and, if the purchase is later refunded or cancelled, a notice saying so. On iPhone, the App also tells Apple's ad-measurement system that it was opened after installation, a report that contains nothing that identifies you (Section 1.4). Apple and Google also receive the information their platforms ordinarily collect from any app installed from their stores.

Independent third parties. Meta, Apple and Google (as app store operators and sign-in providers), Stripe (for the payment information you give it directly, Section 1.2, and for its own purposes described under "Service providers" above), and Resend (for the delivery records described under "Service providers" above) are independent businesses, not our service providers. Each receives from us only the information described in this Section 4 and handles it under its own terms and privacy policy, which we encourage you to read. Our Apps contain no third-party advertising or analytics software, and the Apps themselves send no personal information to Meta. We never send Meta the email address or account ID of an account created in our Apps, or a hash of either, even when that account is used on the Website (see "Advertising partner" above). Apart from our own servers, the only companies to which our Apps send personal information are Apple and Google, in the ways described in this Section 4. Apart from the information their platforms ordinarily collect and the install report described in Section 1.4, Apple and Google receive personal information from our Apps only to complete a sign-in, purchase, or restore that you ask for. They handle it under their own terms and privacy policies, not this one. For example, Apple's advertising platform may use your App Store purchases, including purchases in our Apps, to personalize the ads Apple shows you; you can turn that off on your iPhone in Settings, under Privacy & Security, then Apple Advertising, and turn off Personalized Ads.

Other sites, and Facebook's and Instagram's browser. Some links and buttons in the Services take you to sites we do not operate, such as Stripe's checkout page and Apple's and Google's sign-in and support pages; what you do there is governed by those companies' own privacy policies. If you open the Website from the Facebook or Instagram app, it opens in that app's built-in browser, which is Meta's software, not ours. Meta may be able to collect information about the pages you visit and what you do on them through that browser, on any page of the Website. That collection is Meta's, under Meta's privacy policy; we do not send it, and neither the limits on what Meta receives from us (Sections 3 and 4) nor the opt-out in Section 7.2 can control it. To avoid it, open the Website in your phone's own browser, such as Safari.

Professional advisers. We may give personal information to our lawyers and accountants, and, if we engage them, auditors and insurers, when they need it to advise us, prepare our accounts and tax returns, or establish or defend legal claims. They are bound by professional or contractual duties to keep it confidential. We do not give them information that identifies you as having requested or watched specific series or episodes, except with your consent under Section 3 or as "Legal process and protection" below allows.

Successor Service. When the Services are replaced by the Successor Service, a new version of SteelShort operated by the Company, your account information, acceptance records, purchase and Coin records, unlocked episodes, and viewing information may be transferred to the Successor Service so that your account and balance can continue. The Successor Service will be operated by the Company under a privacy policy at least as protective of your video viewing information as this one, and you will be notified before any materially different privacy policy applies to you.

Aggregated information. We may combine information about many people into totals, averages, and percentages, such as how many people watched an episode or the share of viewers who finished a series, in a form that does not identify you and cannot reasonably be linked to you, your account, or your device. We keep and use these figures only in that form, we do not attempt to re-identify anyone from them, and we may keep them after the information they were made from has been deleted. We may publish them or share them with others, such as investors, business partners, and the press. Apart from what this Section 4 describes, or what you consent to under Section 3, we do not give anyone outside the Company and our service providers record-level information about what people watched, even with names and identifiers removed.

Legal process and protection. We may disclose information if we believe in good faith that disclosure is required by law, regulation, subpoena, court order, or other legal process, or is reasonably necessary to protect the rights, property, or safety of the Company, our users, or others. We will disclose information that identifies you as having requested or obtained specific video content (Section 3) to a government entity only under a warrant, a grand jury subpoena, or a court order, as the Video Privacy Protection Act permits, and in a civil proceeding only under a court order after you have been given notice and an opportunity to object, as that law requires.

Corporate transactions. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, information may be transferred to the successor entity. We will notify you before your personal information becomes subject to a materially different privacy policy.

No other sale or sharing. We do not sell personal information for money. Other than the sharing with Meta described above, which you can opt out of (Section 7.2), we do not share personal information for cross-context behavioral advertising. We operate no advertising business.

5. Cookies and Similar Technologies

The Services use the following cookies, all set by us. We do not share what they contain with Meta or any other third party. Most are needed for the Services to work; the others remember choices you made or an offer you were shown, or keep our own staff's visits out of our usage statistics:

The Website also keeps two settings in your browser's local storage, which are not shared with any third party: ss_sound, which remembers whether you prefer episodes to play with sound, and ss_email_prompt, which remembers that you have answered the optional email prompt in the player.

The following cookies are Meta's. They are set only on the home page, the sign-in and sign-up pages, and the checkout-forwarding page, and only if you have not opted out. Meta sets them; on the checkout-forwarding page, we may set _fbc ourselves (Section 4):

Other than the two Meta cookies described above, we do not use advertising or cross-site tracking cookies, and no third-party advertising or tracking script runs on a series page, an episode page, or the player, or on any page whose address names a series or episode. This does not cover what the Facebook or Instagram app's own browser may collect, which we cannot control (Section 4, "Other sites, and Facebook's and Instagram's browser"). Anything on those pages that is connected with advertising goes through our own server, as described in Section 4: if you arrived from a Meta ad, the episode page passes that ad click to our server, and our servers may send Meta the buy-button, checkout, and purchase information in Section 4(b) and the single event in Section 4(c), none of which names a series or episode.

Tracking by Meta across other sites. Meta may collect personal information about your online activities over time and across different websites and online services, including through its cookies on the Website pages listed above, and may associate the identifiers in its cookies with your activity on other websites and services that use Meta's tools. The opt-out in Section 7.2 stops that association arising from what we send and allow on our pages; it cannot control Meta's in-app browser (Section 4, "Other sites, and Facebook's and Instagram's browser").

Do Not Track and Global Privacy Control. We honor the Global Privacy Control browser signal as a valid request to opt out of sale and sharing (Section 7.2). We do not respond to "Do Not Track" signals, for which no common standard has been adopted.

We may introduce first-party or service-provider analytics cookies or similar technologies, as permitted by applicable law, to collect the usage data described in Section 1.4; where consent is legally required we will obtain it before deployment, and we will update this Section 5 when we do.

6. Data Retention

We retain personal information for the periods stated below, after which it is deleted:

• Account information — for the life of your account, and removed within thirty (30) days of account deletion;
• Purchase records and the Coin ledger — for the life of your account, and deleted when you delete your account. Stripe, Apple, and Google keep their own records of each payment. For Website purchases, our own records at Stripe also stay after you delete your account, for as long as Stripe keeps those records under its own retention policy and legal obligations, unless you ask us to delete them: the customer record we created for you there (your email address, your name if you gave one, and, if you bought Coins, your account ID) and, for each Website checkout, the email address used for it, your account ID (if you were signed in), the address of the page you bought from, and, unless you had opted out of advertising sharing, your IP address, browser type, and Meta's identifiers; for an Everything Unlock checkout opened on Stripe's checkout page, they also include the daily visitor code (Section 1.4). You can ask us at privacy@steelshort.com to delete that customer record and remove those details where Stripe allows it;
• Refunded app purchases — if Apple or Google refunds or cancels an unlock you bought in one of our Apps, we keep the store's number for that purchase, a note that it was refunded, and the date of that note. Nothing else. We keep this for as long as we operate the Services, even after your account is deleted, so that the refunded purchase can't be used to unlock episodes again;
• Payment confirmation numbers — for each purchase of Coins made in our Apps (where Coins were sold there), and each payment notice we receive from Stripe, the number the store or Stripe gives it, with the date we received it and nothing in our records that links it to you, for as long as we operate the Services, so that the same payment is never counted twice;
• Acceptance records — for the life of your account, and deleted when you delete your account;
• Viewing information — your playback position is kept for the life of your account, and records of the episodes you started, watched, and finished are kept as described for usage and analytics data below; all of it is deleted upon account deletion, except activity recorded while you were not signed in;
• Usage and analytics data — a maximum of twenty-four (24) months. Events recorded while you were signed in are deleted when you delete your account. Events recorded while you were not signed in, such as the free episodes you played before creating an account, are identified only by the daily visitor code (on the Website) or by the random code for that installation of our App; they are not deleted with your account and are erased when they reach twenty-four (24) months (if you delete your account in one of our Apps, the App also replaces its code, so those events can no longer be connected to you);
• Meta ad-click identifiers — two (2) days on our servers (Section 4);
• Messages you send us — Up to three (3) years after our last reply, then deleted;
• Sessions — until they expire (no more than ninety (90) days after you sign in) or you sign out; all sessions are revoked immediately when you reset your password or delete your account;
• Information our Apps keep on your device — your sign-in session, until you sign out or delete your account; the App's random code, as described in Section 1.4; the note of the last episode you watched, until a newer one replaces it or you delete your account in the App; crash reports waiting to be sent, until our servers have received them, you turn off Share app usage statistics, or you delete the App; your Share app usage statistics choice; a note that the App is using an account created by an in-app purchase, so that the App can sign back in to it from your purchase, until that changes, you sign out, or you delete your account; a note that you declined to add an email address, until you delete your account in the App; a note, for each series, that you reached the last step of its purchase screen, so that the screen opens on that step, which is not removed when you delete your account; and notes that the App has already been opened and that its installation was reported (Section 1.4), until you delete the App. On an iPhone, what the App keeps in the device's keychain (everything in this list except the crash reports and the notes that the App was opened and its installation reported) can remain on the device after you delete the App;
• Password reset records — expire forty-five (45) minutes after they are created and are deleted within a few hours after that; stored only as a one-way hash;
• Server logs — up to thirty (30) days;
• Database backups — rolling copies retained for approximately seven (7) days, after which deleted records are gone from backups as well.

7. Your Rights and Choices

7.1 Rights Available to All Users

Regardless of where you reside, you may: (a) access a copy of the personal information we hold about you. The self-service export on your Account page on the Website gives you your account details, the Google or Apple sign-ins linked to your account, your Coin history, the episodes you unlocked with Coins, and your watch progress (to use it, sign in on the Website; if your account has no email address, you can first add one in the App and choose a password); for anything else we hold, such as your Everything Unlock and Series Unlock purchases and their order numbers, records of your accepting our Terms, or usage events, email us as described below and we will send you a copy. If your account has no email address and you write to us with an order number instead, we will tell you what kinds of information the account holds; because an order number does not prove who is asking, we provide the information itself, including viewing information, only through the self-service export; (b) correct inaccurate information; (c) delete your account and associated personal information from your Account page on the Website or the Account tab in our Apps, subject to the retention described in Section 6 (deleting an account does not cancel or refund a purchase made through Apple or Google; if that purchase is restored later, it is saved again, to the account you are then signed in to or, if you are not signed in, to a new account created for you, unless it was refunded); (d) receive your information in a portable, machine-readable format; (e) opt out of any optional email through the unsubscribe mechanism included in every such email; and (f) opt out of the advertising sharing described in Section 4, as described in Section 7.2, wherever you live.

To exercise any right, you may also email privacy@steelshort.com from the email address associated with your account (or, if you use Sign in with Apple and chose to hide your email address, from any address, saying so). We confirm that a request to access, receive, correct, or delete your information comes from you by writing back to the email address on your account and asking you to confirm before we act on it (for a hidden Apple address, that is the private address Apple created for you, which Apple forwards to your email); if we cannot confirm it that way, we may ask you for limited additional information, which we use only to verify your request. A request to opt out of the advertising sharing (Section 7.2) does not need that confirmation. You can ask us to opt you out of that sharing by email from any email address, telling us the email address on your account; we will apply it to that account, usually within one business day and never later than fifteen (15) business days, and reply to confirm (Section 7.2). If your account was created by an in-app purchase and has no email address, include the order number from the store's receipt for that purchase and the date you bought instead, so that we can look for the account. We can always match a Google Play order number. We may not be able to match an Apple order number; on an iPhone, the surest way to delete such an account is in the App (tap Account, tap Restore purchases, then tap Delete account). We delete an account only when we can confirm that the purchase on it is the one on your receipt, and we will tell you either way. Our Support page (at steelshort.com/support) explains how to delete your account and where to find the order number. We will confirm that we received your request within ten (10) business days and respond within forty-five (45) days; if we need more time, we will tell you why within those forty-five (45) days, and we may take up to a further forty-five (45) days. We will not charge a fee for, or discriminate against you in response to, the exercise of any privacy right.

Withdrawing consent and deleting your data. You can stop the advertising sharing described in Section 4 at any time through Your Privacy Choices or the Global Privacy Control signal (Section 7.2). Our Apps send the usage events, crash reports, and diagnostic information described in Section 1.4 unless you turn them off: on the App's Account tab, turn off Share app usage statistics, and the App stops sending them and deletes any crash reports waiting to be sent. Deleting the App also stops them. Deleting your account deletes the events recorded while you were signed in, and when you delete it in an App, the App also starts using a new random code (Section 6). If you use Sign in with Apple, you can also disconnect SteelShort from your Apple Account at any time in your Apple Account settings, under Sign in with Apple. You can delete your account at any time, without contacting us, from your Account page on the Website or the Account tab in our Apps, or ask us to delete it by emailing support@steelshort.com or privacy@steelshort.com (we confirm the request as described above); our Support page gives the steps, and Section 6 explains what is deleted and what is kept, and for how long.

7.2 California Residents

The California Consumer Privacy Act, as amended (the "CCPA"), gives California residents, where it applies, the rights to know what personal information a business collects about them and how it is used and disclosed, to delete it, to correct it, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. Whether or not the CCPA applies to us, California residents can exercise each of these rights as described in Section 7.1 and in this Section 7.2.

Categories of personal information in the past twelve months. In the preceding twelve (12) months, we collected the categories of personal information listed in the Notice at Collection, from the sources listed there, for the purposes described there and in Section 2. We disclosed them for business purposes to the service providers described in Section 4, each receiving the categories described there for the services it provides to us (for example, our hosting and backup providers hold the information in our database, Stripe receives identifiers, commercial information, and the address of the page you buy from, and our email providers receive email addresses and the content of emails), and we disclosed identifiers to Apple and Google in connection with purchases made in our Apps. We also disclosed identifiers (your email address) to Resend, and identifiers and commercial information to Stripe, which also use them for their own purposes as described in Section 4. We shared identifiers, commercial information, and internet or other electronic network activity information with Meta for cross-context behavioral advertising.

We do not sell personal information for money. California and other state laws may treat the sharing with Meta described in Section 4 as a "sale" as well as "sharing"; the opt-outs described below (the Your Privacy Choices link, the Global Privacy Control signal, and an email to us) stop it, as described there. We do share personal information, as the CCPA defines that term, with one advertising partner: as described in Section 4, we share identifiers (IP address, browser type, Meta's cookie identifiers, the identifier of a Meta ad click that brought you to the Services, the daily visitor code described in Section 1.4, and, for accounts made on the Website, a hashed email address and account ID, which Meta can use to identify you), commercial information (Coins and the Everything Unlock bought, checkouts started, and taps on a button to buy the Everything Unlock, on the Website; never purchases made in our Apps), and internet activity (visits to the Website pages where Meta's pixel runs and the address of the page you came from, and that you started a second or later episode of a series or reached the end of a series' free episodes on the Website, never which series or episode) with Meta Platforms, Inc. for cross-context behavioral advertising. We do not share the names of the series or episodes you watch, or your watch history; the only viewing-related fact we share is the one described in Section 4(c), which names no series or episode. Because you must be 18 to use the Services, we do not knowingly sell or share the personal information of anyone under eighteen (18), and we have no actual knowledge that we sell or share the personal information of anyone under sixteen (16).

Right to opt out of sale and sharing. You may opt out at any time, without creating an account, by using Your Privacy Choices, linked at the bottom of the Website's pages (on a phone, that link is hidden while an episode is playing; it is on the home page, and the page is always at steelshort.com/privacy-choices), or by enabling the Global Privacy Control signal in your browser, which we treat as a valid opt-out request. If you are signed in when you use Your Privacy Choices, or when your browser sends a Global Privacy Control signal, we also record your opt-out on your account. If you are not signed in, your choice is recorded in a cookie on that browser; once you sign in on that browser, or buy there with the email address on your account, we record it on your account too. From then on, our servers send Meta nothing about that account, from any browser or device, including for purchases made for that account, and when you sign in to it on another browser we turn the opt-out on for that browser too. Until you sign in on a browser, we cannot tell that it is yours, so we treat it as a separate visitor: Meta's pixel and the events described in Section 4 can still apply there, without your email address or account ID, until you sign in or opt out on that browser. So please opt out on each browser you use while signed out, or sign in and make your choice once. You can also opt out by emailing privacy@steelshort.com and telling us the email address on your account, from any email address; we will apply it to that account, usually within one business day and never later than fifteen (15) business days. An opt-out on your account stays in place until you turn it off on the Your Privacy Choices page while signed in. Turning it off takes two steps: you ask to turn sharing back on, then confirm. Opting out does not affect your ability to use the Services or the price you pay.

Right to limit. The only sensitive personal information, as the CCPA defines it, that we collect is your account log-in: your email address together with your password. We use and disclose it only to sign you in and keep your account secure, purposes permitted by 11 CCR § 7027(m), and not to infer characteristics about you. Because we do not use or disclose sensitive personal information for any other purpose, the right to limit does not apply.

An authorized agent may submit a request for you by emailing privacy@steelshort.com with your signed permission or a power of attorney. For a request to know, delete, or correct, we may also ask you to confirm your identity with us directly and to confirm that you gave the agent permission. A request to opt out does not need that verification, but we may ask for your signed permission.

7.3 Residents of Other U.S. States

If you reside in a state with a comprehensive consumer privacy law (for example Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia), you have the rights described in Section 7.1. You may also opt out of targeted advertising and of any sale of your personal data. The only such processing is the sharing with Meta described in Section 4, and the Your Privacy Choices link, the Global Privacy Control signal, and an opt-out by email, described in Section 7.2, work the same way wherever you live. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects, and we do not use it to train large language models. You may appeal our refusal of any request by replying to our decision and stating that you are appealing. We will review your appeal and tell you the result in writing within the time your state's law requires, and if we deny your appeal we will tell you how to contact your state Attorney General.

Nevada residents. We do not sell covered information as Nevada law defines a sale (an exchange for money). If you live in Nevada, you may still direct us not to sell it by emailing privacy@steelshort.com, our designated request address, and we will honor your request and respond as described in Section 7.1. This is separate from the advertising opt-out in Section 7.2, which you can also use.

7.4 United Kingdom and European Economic Area

The Services are operated from the United States, are directed to a United States audience, and are not currently offered in the United Kingdom or the European Economic Area; we do not target, advertise to, or monitor the behavior of individuals in those regions. If you nevertheless access the Services from those regions, you do so on your own initiative, and your information will be processed in the United States. You have the rights described in Section 7.1, together with the rights to object to and restrict processing and to lodge a complaint with your supervisory authority, and requests submitted to privacy@steelshort.com will be honored.

8. Children's Privacy

The Services are intended for adults and are not directed to children. You must be at least 18 years of age to use the Services or create an account (Terms, Section 1). We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information to us, contact privacy@steelshort.com and we will delete it.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including: encryption of data in transit between your browser or App and our servers (HTTPS); storage of passwords exclusively as salted one-way hashes; storage of session credentials as cryptographic hashes; HttpOnly session cookies inaccessible to page scripts; immediate revocation of all sessions when a password is reset; entitlement verification on every video request, with no video served from publicly accessible storage; transmission of payment card data directly to our payment processor without transiting our servers; encrypted, access-controlled database backups; and access to production systems limited to personnel who require it to operate the Services. No security program is infallible; in the event of a breach affecting your personal information, we will notify you and the appropriate regulators as required by applicable law.

10. International Processing

The Services are hosted and operated in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction.

11. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time, and we expect to do so when the Successor Service launches. We will post any revised Privacy Policy on this page and update the "last updated" date at the top, which always reflects the current version. If we make a material change, we will notify you by email or through the Services at least thirty (30) days before the change takes effect, and may ask you to accept the revised policy. Your continued use of the Services after the effective date of a revised Privacy Policy constitutes your acknowledgment of the revised policy. If your account is carried into the Successor Service, we will tell you about the Successor Service's privacy policy, in the same way and with the same notice, before it applies to your information.

12. Contact Us

If you have questions about this Privacy Policy, or want to exercise any of the rights described in Section 7, contact us:

Steelshort LLC · 2108 N St #17999, Sacramento, CA 95816

• Privacy questions and requests: privacy@steelshort.com
• All other inquiries: support@steelshort.com
• Phone: (707) 679-0415