Privacy Policy

Who we are

This Privacy Policy is issued by Custom Cult LLC, 900 Roma Ave NW, Albuquerque, New Mexico 87102, United States ("Custom Cult," "we," "us"). We run the Custom Cult website, where you can design, share, and buy custom snowboards and where independent designers offer board algorithms and graphics.

For people in the European Union, the United Kingdom, and other places with similar laws, Custom Cult LLC is the controller of your personal information.

Privacy questions and requests: privacy@customcult.com. You can also write to us at the address above or use the Contact page linked in the site footer.

This is Version 2 of this policy. Effective date: September 22, 2026. The "last updated" date shown at the top of this page changes whenever we edit this policy.

Who this policy covers

This policy covers everyone who uses the site: visitors who design a board without an account, customers who order (with or without an account), designers in our marketplace, people who open a shared board link, and people who contact support. Some sections apply only to designers or only to people in certain countries; those sections say so.

Information you give us

• Account details. Your email address and a password (we store only a secure hash of it, never the password itself). If you sign in with Google or Apple we store the account identifier they send us, your email, and, the first time, your name. If you order as a guest we create an account record from the email you give at checkout so your order can be found later. You can claim that record by setting a password.
• Body measurements and riding preferences. Height, weight, boot or foot length, whether you ride goofy or regular, and your riding intensity. We ask for these so the board we build fits you. They are needed to make a board and to complete an order. They are not health data, but we treat them with care: we use them only to size and build your board and to save your designs, and we never send them to advertising or analytics services. We include them when you ask to see your data, and we remove them when your account is deleted, except on boards you ordered, where they stay with the order record.
• Designs. The boards you design and save, the graphics you upload or generate, and the settings you choose.
• Order and shipping details. Your name, shipping and billing address, what you ordered, the price, tax, and shipping you paid, and the production and delivery history of your board. Card and other payment details are entered directly into Stripe's secure form; we never see or store full card numbers.
• Designer profile. If you join the designer program: your display name, avatar, bio, home mountain, social links, and a profile address (slug). Most of this is public; see "Designers and public information."
• Payout and tax details. Designers are paid through Stripe Connect. Stripe collects your identity, date of birth, tax identification, and bank details directly on Stripe's pages. We store only your Stripe account identifier, its status, and records of what we paid you.
• Messages to us. What you write on the Contact page or in a help request about your board, the email you want us to reply to, and, if you choose to attach it to a bug report, technical details such as your browser, screen size, the page you were on, and recent error messages.
• AI prompts and chats. When the AI tool is available: the text you type to generate artwork and any answers you give our design assistant. Please do not put personal information about yourself or anyone else into prompts.
• Reactions. Cheers you give designers, the graphics you react to or pick between, and feedback you leave on an order.
• Legal notices. If you send a copyright notice, counter-notice, or content report, the details you provide, which by law may be forwarded to the other party.

Information we collect automatically

• Session and cart. A random session identifier so the site remembers your design, cart, and sign-in as you move between pages.
• Referral. If you arrive through a designer's link, a signed cookie records that designer so they can earn a commission if you buy within 30 days. This cookie contains a designer identifier and a timestamp, nothing about you.
• Approximate location. We do not work out a location from your connection. If your browser has already given this site permission to use your location, we read it, round it on your device to an area roughly 10 kilometres (6 miles) across, and use that area for a few minutes to show designers who ride near you; we never ask for that permission ourselves. If you give us an address, we use it to apply the right regional rules. We do not collect precise location.
• Device and connection. Your IP address, browser type, and request details are processed to serve pages, to protect against abuse (for example rate limits on sign-in, uploads, and AI generation), and in our server and security logs. When you ask for a password reset we record the IP address that asked, so we can investigate misuse.
• Interactions with designs and graphics. Which boards you look at, save, and share, and which graphics you cheer, react to, or choose between. We use this to rank designers and to suggest graphics that riders with similar taste liked.
• Email delivery events. Whether an email we sent was delivered, bounced, or was reported as spam, so we stop sending to addresses that do not work.

We use PostHog, a product-analytics service, to see how the site is used: the pages you view, the design steps you reach, the page or link that brought you here, and your device and browser type. It runs without cookies and without tracking you across other sites. It does not identify you unless you sign in; then it links these events to a random account number, never your name or email. PostHog receives your IP address and uses it to work out your country. We do not show a consent choice for analytics today, because it sets no cookies. We plan to ask visitors in the European Union, the United Kingdom, and Canada before analytics is sent, and we will update this policy when we do. We do not use advertising or social-media tracking tools.

Information we receive from others

• Google and Apple send us your name, email, and an account identifier when you choose to sign in with them. We use this only to create or sign you into your account. If you use Apple's "Hide My Email," we receive and use the relay address Apple gives us.
• Stripe sends us the outcome of your payment, the shipping address you entered in its form, tax calculations, and, for designers, the status of your payout account.
• Our hosting providers block abusive traffic before it reaches us.

How we use information, and our legal reasons

We use personal information to:

1. Build and ship your board: calculate your board from your measurements and choices, take payment, make the board, ship it, and tell you where it is.
2. Run your account: sign you in, save your designs and cart, verify your email, reset your password, and let you manage or delete your account.
3. Run the designer marketplace: show designer profiles and algorithms, credit referrals, calculate and pay commissions, rank designers by cheers and sales, and show designers near you.
4. Make and print artwork: when the AI tool is available, send your prompt or image to an AI service, watermark previews, check generated images for defects, and keep copies that help us find and fix generation problems; enlarge the artwork on every board so it prints sharply; and, with your recorded acknowledgement, add AI images you did not use to our public gallery (see "AI artwork and assistants").
5. Suggest graphics: compare your reactions with other riders' reactions to show you graphics you are more likely to like.
6. Support you: answer your messages, handle repairs, replacements, refunds, and store credits, and let a member of our staff view your account when you ask for help.
7. Send service email: order confirmations and updates, sign-in and security messages, designer payout notices, credit notices, and replies to your requests.
8. Send marketing email, only if you have asked for it, and always with an unsubscribe link.
9. Keep the site safe: prevent fraud, abuse, scraping, and misuse; enforce our Terms; handle copyright notices.
10. Meet legal duties: tax and accounting records, tax forms for designers, responding to lawful requests, and defending legal claims.

For people covered by the EU or UK GDPR, our legal bases are: performance of a contract for items 1, 2, 3 (your designer agreement), 6, and 7; legitimate interests for items 3 (rankings), 4 (artwork processing), 5, 6 (staff access), and 9, where our interest is running a fair marketplace, making better artwork tools, and keeping the site secure, balanced against your rights; consent for item 8, for the gallery acknowledgement in item 4, and for any optional cookies we add later; and legal obligation for item 10. You can object to processing based on legitimate interests; see "Your rights."

We do not make decisions about you that have legal or similarly significant effects using automated processing alone. Designer commission tiers move up automatically when sales thresholds are met; that only ever benefits the designer.

Designers and public information

If you join the designer program, please understand:

• Your profile is public. Your display name, avatar, bio, home mountain, social links, and profile address are shown to everyone, including in link previews on social media. Your home mountain text is sent to a map and geocoding provider to get approximate coordinates; the coordinates are used only to find riders near you and are never shown to anyone.
• Your algorithms are public. When you become a designer, or accept our invitation to become one, the parameters of the board you bought become an algorithm other customers can discover and build on. That is how the marketplace works.
• Rankings are public. Where you appear in the designer carousel depends on cheers, sales, and how near you are to the rider looking.
• Payouts run through Stripe. Stripe is a separate company with its own privacy policy (stripe.com/privacy) and its own agreement with you (the Stripe Connected Account Agreement). Stripe or we may issue tax forms such as a 1099 where required.
• If you delete your account, your profile is replaced with "Deleted designer" and your bio, avatar, links, and home mountain are removed, but algorithms that other riders have used and any commission records are kept so existing boards, orders, and payouts stay intact. Your profile address and the name of your algorithm may still show your display name until we rename them.

Boards and graphics you share

Every saved board has a web address. Anyone who has that address can view the board and its graphic, see the name of the designer whose algorithm it uses, and start their own design from the board's shape. Share images and videos we generate for a board are stored on our public content network so links work in messaging apps and social media. Graphics you upload are stored at an unlisted public web address so they can be shown on your board and in share images, until we remove them. Do not share a board link or upload an image you want to keep private. There is no private mode for saved boards today, and deleting a design does not always take its share page or images down right away.

When you share a board, the page your friend opens is rebuilt from the measurements you entered (your height, weight and boot size) so they see the exact board you designed. Those numbers are not shown on their screen, but they do reach their browser. We plan to keep them on our servers only. Until then, share a board only if you are comfortable with that.

Who we share information with

We share personal information only with companies that help us run the service, with payment and sign-in providers you choose, and where the law requires. We do not sell personal information and we do not share it for targeted advertising.

We may also share information with carriers to deliver your board (your name and delivery address), with tax authorities where the law requires, with professional advisers, and with law enforcement or courts when legally compelled. If Custom Cult is sold or merges, customer records would transfer with the business and this policy would continue to apply to them.

If you want to know which company handles a specific request, ask us at privacy@customcult.com and we will tell you.

Payments

Payment details go straight from your browser to Stripe. Stripe may offer Link, its own saved-payment service, which stores your details with Stripe under Stripe's privacy policy. If you pick a buy-now-pay-later option, that provider becomes responsible for its own decisions and data. Refunds and store credits are recorded on your order.

AI artwork and assistants

When the AI tool is available and you generate artwork, we send your prompt, and any image you supply, to the AI services listed above and keep: the prompt, the generated image with a preview watermark, an un-watermarked copy used only for your board and your share assets, and, when you supply a starting image, a copy of that image. We also keep images the quality check rejected. We keep these to make your board, to show your generation history, and to find and fix problems in the artwork pipeline. We do not use your prompts or images to train AI models. We may study prompts in aggregate, for example which subjects or styles lead to graphics people keep and share, to improve the suggestions we offer. We do not show your prompt to other people.

The design assistant is a chat that helps you decide what to make. Your messages go to an AI model provider to generate the reply and are kept with your session so the conversation makes sense. Do not share personal information in it.

Community gallery. When the AI tool is available, you will be asked once, before your first generation, to acknowledge that AI images you generate and do not use may be added to our public graphics gallery, credited to Custom Cult, for other riders to put on their boards. We record that acknowledgement. If you do not agree, you cannot use the AI tool. An image you bought on a board is never added, and images made from a photo you uploaded are never added. The gallery credits images to Custom Cult and does not show your name or account. Every image is reviewed by a person before it appears. The Terms of Service explain the waiting periods and how removal works.

Cookies and browser storage

We set only cookies the site needs to work. Our product analytics runs without cookies, and we do not set advertising cookies.

Stripe sets its own cookies on the checkout page for payments and fraud prevention. Your browser's storage also keeps your in-progress design, your unit preferences (inches or centimetres), and similar conveniences; nothing in it leaves your device except your saved design when you choose to save it and the random visit identifier our analytics uses to group one visit's page views.

If you are in the European Union, the United Kingdom, or Canada, the referral cookie is set when you open a designer's link and is used only to credit that designer. You can block or delete cookies in your browser; the site will still let you browse and design, but you may lose your cart or sign-in.

Email

We send service emails about your account, orders, designer payouts, credits, and requests. You cannot opt out of these while you have an account or an open order, because they are how we run the service.

Marketing emails are separate. We send them only if you have asked for them. Every marketing email has an unsubscribe link, and you can change your choice at any time under Account, then Notifications.

How long we keep information

Deleting your account

You can delete your account under Account, then Settings. Your account is signed out everywhere and scheduled for deletion in 30 days. During those 30 days you can reactivate it with the link we email you. After 30 days we:

• replace your email, name, password, and sign-in identifiers with placeholder values;
• delete your saved designs that were never ordered and your notification settings;
• replace a designer profile with "Deleted designer" and remove its bio, avatar, links, and home mountain.

We keep: your orders, including the name and address the board was shipped to, for the period above; the rider measurements on boards you ordered; commission and payout records; algorithms other riders have used, and the profile address and algorithm name of a designer profile; support messages and their contact email; AI prompts and images tied to your orders; the address that requested a password reset; payment-provider event records; and security logs.

If you designed as a guest without an account, the anonymous session data is not linked to you by name; contact us if you want it removed and can identify the session.

Your rights and how to use them

Wherever you live, you can ask us to:

• See the personal information we hold about you and get a copy in a common file format;
• Correct it (most of it you can edit yourself under Account);
• Delete it (see "Deleting your account" for what we must keep);
• Stop marketing email (Account, then Notifications, or the unsubscribe link);
• Object to or restrict processing based on our legitimate interests;
• Withdraw consent where consent is the basis, without affecting what was done before.

To make a request, email privacy@customcult.com or use the Contact page. Tell us which right you want to use. We will confirm it is you, usually by writing to the email on the account; if the request comes from a different address or on someone's behalf, we may ask for more proof. We reply within 30 days. If a request is complex we may take longer and will tell you why. If we refuse a request in whole or part we will explain, and you can appeal by replying to our decision; we will answer an appeal within 45 days. We never charge for a first request and we will never treat you differently for making one.

European Union and United Kingdom. You also have the rights to data portability and to lodge a complaint with your data protection authority (in the UK, the Information Commissioner's Office).

United States. We do not sell personal information, and we do not share it for cross-context behavioral advertising, and have not done so in the past 12 months. We do not use sensitive personal information for anything beyond providing what you asked for. We treat a Global Privacy Control signal from your browser as an opt-out of sale or sharing, although there is nothing to opt out of today. Residents of states with privacy laws may use the rights above; an authorized agent may act for you with your written permission.

Canada. You may ask to see and correct your information, withdraw consent (subject to legal or contractual limits), and complain to the Office of the Privacy Commissioner of Canada. In Quebec, the person in charge of the protection of personal information at Custom Cult is Marty Bonacci, our owner, who can be reached at privacy@customcult.com.

Where your information is stored

Custom Cult is in the United States and your information is stored on servers in the United States. If you are outside the United States, your information is transferred here when you use the site. Our providers process your information under their data-processing terms; where the law requires safeguards for a transfer to the United States we rely on those terms and, where a provider holds it, its EU-US Data Privacy Framework certification. If you are in Australia, Mexico, or Switzerland, the same applies: your information is processed in the United States under the safeguards described here. Ask us for details.

Security

We protect your information with encryption in transit, hashed passwords, signed cookies, rate limits, staff access limited to what a task needs, activity logs for every staff action, and regular backups. No system is perfectly secure, so keep your password private and tell us at once if you think your account has been misused.

Data breaches

If a breach of security affects your personal information and creates a risk to you, we will tell you without undue delay and, where the law requires, notify the relevant authority: within 72 hours for people covered by the EU or UK GDPR, within 45 days for New Mexico residents, and as required by other applicable laws.

Children

Anyone can use the board designer, with or without an account. You must be 18 or older to place an order; a parent or guardian places the order for a rider under 18. We do not knowingly create accounts for, or collect personal information from, children under 13. If we learn that a child under 13 has given us personal information, we will delete it. Parents can contact us at privacy@customcult.com.

Staff access to your account

When you ask for help, a member of our staff may view your account or designer dashboard the way you see it for up to 30 minutes at a time. Every such session is logged with who did it, when, and why.

Changes to this policy

We may update this policy. When we make material changes we will update the date at the top of this page and, for account holders, may ask you to review and acknowledge the new version the next time you sign in.

Contact

Custom Cult LLC
900 Roma Ave NW
Albuquerque, NM 87102
United States

Privacy questions and requests: privacy@customcult.com
Copyright notices: dmca@customcult.com
Questions about the Terms of Service: legal@customcult.com
Help with an order: support@customcult.com
Or use the Contact page linked in the site footer.