Privacy Policy

Last updated: May 17, 2026

Chambered ("we," "us," "our") operates the website at chambered.app and any related tools and applications (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Information You Provide

Email list / waitlist: Email address only. Optional fields (name, state) are explicitly optional.
Interactive tools (Dope Card Builder, Can I Carry, etc.): Data you enter is stored LOCALLY in your browser's localStorage — it does not leave your device unless you explicitly enable cloud sync (a future feature).
Support requests: Your email and any details you share.

Information Collected Automatically

Standard server logs: IP address, browser type, device type, pages visited, referring URL, timestamps. Retained for 30 days for security and diagnostics.
Privacy-respecting analytics: Aggregated page-view data only. We do not use Google Analytics or cross-site tracking cookies.
Functional cookies only. No third-party advertising cookies.

2. How We Use Information

To provide and improve the Service
To send you content you've subscribed to
To respond to your support requests
To detect and prevent fraud, abuse, or security incidents
To comply with legal obligations

We do NOT:

Sell or rent personal information to third parties
Train AI models on your personal data
Build cross-site advertising profiles
Share with data brokers

3. Data You Enter Into Tools

Our interactive tools (Dope Card Builder, Can I Carry, future inventory tracker) store the data you enter in your browser's local storage by default:

The data lives on YOUR device, not our servers.
If you clear your browser data, the saved entries are erased — we cannot recover them.
If you use the tool from a different device, your saved entries don't carry over.
We do not have access to or visibility into what you save locally.

When optional cloud sync ships in the future, it will be opt-in, encrypted in transit and at rest, and disable/deletable at any time.

4. Third-Party Services

Hosting + CDN: Vercel (server logs, edge cache).
Email service: ConvertKit or Beehiiv (email subscriber management). They process your email address for the purpose of delivering email you subscribed to.
Analytics: Privacy-respecting page analytics with no third-party advertising integrations.

We do NOT use Google AdSense, Facebook Pixel, TikTok Pixel, or any cross-site advertising tracking.

5. Your Rights

Access the personal information we hold about you.
Correct any inaccurate information.
Delete your account and associated data.
Unsubscribe from any email at any time via the unsubscribe link at the bottom of every message.
Object to our processing of your data.

To exercise these rights, contact us via the support page.

6. California Residents (CCPA)

California residents have additional rights under the CCPA: right to know, right to delete, right to non-discrimination, right to opt out of the "sale" of personal information (we do not sell, so there is nothing to opt out of).

7. EU/UK Residents (GDPR)

EU/UK residents have the right to access, rectify, erase, restrict processing, port, and object to our processing of your data. Our legal bases for processing are: consent (for marketing communications) and legitimate interest (for service operation + security).

8. Children

Chambered is intended for adults. We do not knowingly collect information from children under 13. If you believe we have inadvertently done so, please contact us and we will delete it.

9. Security

We use HTTPS, secure authentication, and limited employee access to user data. We will notify affected users in the event of a security incident impacting personal data.

10. Changes to This Policy

We may update this policy. Changes will be posted with a revised "Last updated" date. For material changes, we will notify subscribers via email.

11. Contact

Questions about this policy? Reach us via the support page. We typically respond within 1-2 business days.