Last Updated: April 1, 2026
That is quite the bold link you clicked to land here, and a serious one. It should be. California law (the California Privacy Rights Act, or CPRA) requires it to appear on every page of our site. Your personal information matters, and you deserve a straight answer about what we do with it.
PHLster has never sold your personal information. We never will.
Selling customer data is something we consider flat-out wrong. It is not who we are.
So what does sharing mean?
California law uses the word "sharing" differently than you might expect. Under the CPRA, sharing includes using data platforms for advertising, even when no money changes hands for the data itself. When we run a Google Ad, that technically counts as sharing under the law. We want you to know that upfront.
The data we use serves a real purpose: helping a small business get found by people looking for what we make, and making your experience on our site better. Here is exactly what we use and why:
Google Analytics
This tells us how people use our website. Where visitors come from, which pages get read, what products people look at. We use it to make our site easier to navigate and easier to find what you are looking for.
Google Ads
This is how we advertise PHLster. If someone searches "beltless holster" on Google, we can pay to have our site show up. That is it. A small business trying to get found.
Google Merchant Center
This lets our products show up in Google Shopping results. When someone searches for a specific holster, they can see PHLster products and prices right inside Google, not just a link to our site.
Hotjar
This shows us how people actually use our site. Where they click, how far they scroll, where they get confused. We use it purely to build a better website. Not for ads. Not for targeting.
Meta (Facebook and Instagram)
This lets us run product ads on Facebook and Instagram. We want to be able to advertise our gear on social media, and this integration is required to do that.
Klaviyo
This is our email platform. It is how we send post-purchase support emails, our newsletter, and product updates. We use it to actually communicate with customers, not to spam them.
What about cookies?
Cookies are small files your browser saves so our site remembers things between pages and visits. Most of them are just practical:
- Your shopping cart contents, so it is still there when you open a new tab
- Whether you are logged in, so you stay logged in as you browse
- Your privacy choice, so we do not show you the banner on every visit
- Basic site preferences and settings
Some cookies are also used for analytics and advertising. Those are the ones the platforms above rely on, and the ones this page gives you control over. Opting out of ad tracking does not affect your cart, your login, or how the site functions.
We would rather be completely transparent than hide behind vague language. Everything below is the formal, legally required compliance information. It is thorough because it has to be, but the plain-English summary above is the honest answer.
Your Options
Option 1: Global Privacy Control (Automatic)
The easiest way to opt out is to use a browser or extension that supports the Global Privacy Control (GPC) signal. When your browser sends that signal, we automatically suppress advertising tracking on your visit. No further action needed.
Compatible options include: Brave, Firefox with a privacy extension, and the DuckDuckGo Privacy Browser. Visit globalprivacycontrol.org to learn more.
Option 2: Opt Out Through Each Platform Directly
You can opt out of interest-based advertising directly on each platform:
- Google: Google Ad Settings (turn off personalized ads across Google properties)
- Meta (Facebook and Instagram): Off-Facebook Activity (disconnect your off-Facebook activity from your account)
- Multiple ad networks at once: aboutads.info
Option 3: Submit a Formal Privacy Request
California residents may submit a formal request to opt out of data sharing, access their personal data, request deletion, or request correction of inaccurate data. We respond to verifiable requests within 45 days.
Online form: Submit a Data Request
More Information
For a complete description of how PHLster collects, uses, and protects your personal information, read our full Privacy Policy.
Questions? Visit our Support Page.