YOUR ORDER STAYS PRIVATE

Only what we need
to get you your kit.

This notice covers the We On Go website, checkout and private order service operated by Strategy Crate.

Order information

We record the kit and version purchased, price, order reference, payment-provider references, payment/refund/dispute status, terms acceptance and delivery events. Stripe collects payment details and purchaser email. We store the purchaser email returned by Stripe to help verify and support the order. Full card details do not pass through our service.

Necessary cookies and private links

A random first-party, HttpOnly browser cookie lets you return to orders created on that browser. It lasts up to one year unless removed. A hash of that cookie is stored with your order. Your saved private order link contains a strong access key in its fragment (the part after #). That key is used to authorize access; it is not sent in the page URL or shared with analytics. Treat the link like a password. Order-access keys expire after one year; hosted re-download availability is separately limited to 90 days after payment.

Security and providers

The service uses Stripe for payment processing, Vercel for hosting, and a PostgreSQL database for durable order records. Request IP information is converted into a keyed hash for time-limited rate limiting in the application. Hosting and payment providers may retain security and service logs under their own policies. Private order, recovery and download pages do not load Google Tag Manager, Google Analytics or advertising pixels. We do not sell order information.

Optional website measurement

On public marketing, kit-selection and purchase-setup pages, your cookie choice controls optional Google Tag Manager and Google Analytics measurement. Essential only blocks these tags. Analytics only allows analytics; advertising remains a separate choice. You can change your choice using Cookie settings. We honor Global Privacy Control by disabling optional advertising storage.

With analytics consent, we measure visits, selected kits, demonstration interactions, sample-download clicks and successful checkout preparation. We keep a random analytics identifier and a session reference so server-confirmed live purchases can be associated with the consented visit. Campaign labels and the referring website host can be stored with the order; full query strings, private access links, card details and purchaser email are excluded from measurement payloads. A sample-download click does not prove the file was opened, and a checkout start does not prove payment.

The consent preference is retained for up to 180 days. Optional analytics identifiers and campaign context may be held in this browser until you withdraw consent or clear storage. Google may process request metadata, including IP information, under its own privacy policy. Advertising consent alone does not mean an advertising integration is active. Meta purchase tracking is not yet connected. Necessary payment and security records remain separate from analytics.

Retention and your choices

We retain order records as needed to deliver the product, handle support, refunds and disputes, and meet applicable financial-record obligations. You can remove the browser cookie at any time, but doing so removes same-browser recovery. Keep your private order link and downloaded ZIP. Contact support to ask about your information, correction or deletion; records needed for legal or financial obligations may have to be retained.

Support and privacy requests

iamgeorgekelly@gmail.com Include your order reference when relevant. Do not send card numbers, private access keys, passwords or provider secrets in an ordinary support email.