Privacy Policy.

1. What we collect

When you buy a tape: your email address, the ballistic and turret inputs you enter (rifle, cartridge, bullet, velocity, turret specs, conditions), your order details, and the generated PDF file. If you arrived from one of our ads, the ad's campaign parameters (the utm_* values and, when present, Google's gclid ad-click identifier) are saved with the order so we can measure which campaigns lead to purchases.

If you create an account: your email, an optional display name, and a password (stored as a secure hash, so we never see it).

When you contact us: whatever you include in your message, plus your email so we can reply.

When a dealer builds a tape: we store the dealer organization, location, staff account, and tape inputs. A customer email supplied for delivery is sent to our email provider but is not copied into the permanent licensing ledger or dealer report.

If you use Locate me: after your browser asks for permission, your coordinates pass through DialWRX only long enough to request ground elevation from the U.S. Geological Survey. If that point service is unavailable, DialWRX requests the corresponding map tile from Mapzen Terrain Tiles on AWS and accepts it only when the tile identifies USGS 3DEP/NED as its source. DialWRX does not store or log your coordinates or attach them to your order.

For abuse prevention: the app keeps a keyed one-way hash of the requesting IP address with request timestamps for the active one-minute or 24-hour protection window. An hourly retention job removes expired entries; the raw address is not stored in that table.

For app usage measurement: the tape builder records page views, meaningful builder interactions, and successful interactive previews. It also records the campaign source, medium, and campaign name when those values are present. To estimate daily visitors without a browser tracking ID, the app stores a keyed one-way hash of the requesting IP address that changes each day. The raw address, form values, email, account ID, full URL, browser details, and ad-click identifiers are not stored in this analytics table.

What we don't collect: we never see or store your card number. Payment goes directly to Stripe. We run no advertising trackers and sell no data to anyone, full stop.

2. Who processes it

We use a small set of service providers to run DialWRX, each receiving only what they need:

• Stripe: payment processing (your card details go to Stripe, not us)
• Supabase: account authentication, order database, and private file storage
• Resend: sends your tape and receipts by email
• Netlify and Fly.io: host the website and the tape builder (Netlify also gives us aggregate, cookieless traffic counts from server logs)
• U.S. Geological Survey: receives coordinates only when you choose Locate me, and normally returns the elevation for that location
• AWS Open Data: Mapzen Terrain Tiles receives an approximate map-tile identifier, rather than your exact coordinates, only when the USGS point service is unavailable

Fallback terrain data: Mapzen Terrain Tiles, accessed July 13, 2026 from the AWS Registry of Open Data. U.S. 3DEP/NED data courtesy of the U.S. Geological Survey.

3. Cookies and local storage

If you sign in, your browser stores a session token so you stay signed in. The tape builder keeps your cart, your checkout email, and (if you came from an ad) that ad's campaign parameters, including a gclid when present, in your browser's own storage so nothing is lost between visits. The cart and campaign parameters are cleared after the server validates the returned order. Your checkout email is retained to prefill a future order until you clear this site's browser data. No advertising cookies or cross-site tracking. For marketing-site traffic volume we use Netlify's server-side analytics, which counts visits from request logs without cookies or scripts in your browser. The tape builder sends the first-party usage events described above to DialWRX. It does not set an analytics cookie or store a browser tracking ID.

4. How long we keep it

Account data and saved tapes stay as long as your account exists. Order records are retained for financial and tax compliance. Guest-order emails are kept with the order record. App usage records are retained for 90 days. Their daily visitor hash changes at Mountain Time midnight, so the analytics table does not carry one persistent identifier from day to day.

5. Deleting your data

Account holders can delete their account from the account page at any time. Deletion permanently removes your profile, login, and stored tape files. Order records are kept for legal compliance but anonymized, stripped of the link to you. Guests or anyone else wanting data removed can email info@dialwrx.com and we'll handle it within 30 days.

6. Your rights

Wherever you live, and specifically under the GDPR (EU) and CCPA (California), you can ask us what data we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email info@dialwrx.com for any of these. We don't sell personal information, so there's nothing to opt out of.

7. Not for kids

DialWRX is a product for firearm owners and is not directed at anyone under 18. We don't knowingly collect data from minors.

8. Changes

If this policy changes materially, we'll update the effective date above and note the change here.

9. Contact

Privacy questions: info@dialwrx.com.