Skip to main content

/ Legal

Privacy Policy

What we collect, why we collect it, and the controls you have. Plain English, no fine print.

Last updated: April 26, 2026

TireOrbit (“we,” “us,” “our”) operates tireorbit.com and related services. This policy explains the personal information we collect, how we use it, and the choices you have. By using TireOrbit, you agree to the practices described here.

1. Information we collect

Information you provide

  • Account details: name, email, password hash, phone (optional).
  • Order details: shipping address, vehicle info, selected installer, order history.
  • Payment info: handled by Stripe. We never see or store full card numbers.
  • Communications: support tickets, reviews, survey responses.

Information collected automatically

  • Device and browser data: IP address, user agent, screen size, referring URL.
  • Usage data: pages viewed, search queries, clicks, time on page.
  • Cookies and similar technologies (see our Cookie Policy).

2. How we use information

  • Process orders, ship tires to your chosen installer, and provide support.
  • Authenticate accounts and detect fraud or abuse.
  • Send transactional email (order receipts, shipping updates, install reminders).
  • Send marketing email only if you opt in. You can unsubscribe at any time.
  • Improve the site, measure performance, and run aggregated analytics.
  • Comply with legal obligations and enforce our Terms.

3. How we share information

We do not sell your personal information. We share it only with the following categories of recipients, and only when needed:

  • Payment processor: Stripe, for card, Apple Pay, Google Pay, Link, Affirm, and Klarna transactions.
  • Distributor: American Tire Distributors (ATD), for drop-shipping the tires you ordered to the installer you selected.
  • Installer: the local shop you pick at checkout receives your name, vehicle, tire model, and contact info so they can complete the installation.
  • Service providers: AWS (hosting, email via SES), Cloudflare (CDN, security), Google Maps and Places (installer lookup, address autocomplete), Sentry (error monitoring).
  • Legal: when required by law, court order, or to protect rights, safety, or property.

4. Data retention

We keep account and order records as long as your account is active and for up to 7 years after closure to satisfy tax, accounting, and warranty obligations. Server logs are kept up to 90 days. You may ask us to delete your account at any time, subject to legal retention requirements.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your data. California residents have rights under CCPA, including the right to know, delete, correct, and limit use of sensitive personal information. EU and UK residents have rights under GDPR and UK GDPR. To exercise any right, email [email protected]. We respond within 30 days.

6. Cookies and tracking

We use strictly necessary cookies (session, cart, auth), functional cookies (preferences, theme), and analytics cookies. Details and opt-out instructions are in our Cookie Policy. We honor Global Privacy Control (GPC) signals as a do-not-sell request.

We use PostHog for product analytics and to run A/B experiments. PostHog only loads after you grant analytics consent in the cookie banner. Sensitive form fields (payment, password) are masked in session recordings. You can opt out at any time from the cookie preferences panel.

7. Children

TireOrbit is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has provided us information, email [email protected]and we will delete it.

8. Security

We use TLS in transit, encrypted backups at rest, hashed passwords (Argon2id), 2FA for staff, and least-privilege access controls. No system is perfectly secure; if you suspect unauthorized access, contact us immediately.

9. International transfers

We are based in the United States and process data in the US. If you access TireOrbit from outside the US, you consent to the transfer of your data to the US, which may have different data protection laws than your home country.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or a banner on the site. Continued use after changes means you accept the updated policy.

11. Contact

Privacy questions or requests: [email protected]. General support: contact form.