Plain-English summary of what ToeForward collects, why we collect it, and what we never do with it. We are not in the business of selling data — we are in the business of selling insoles.
If you join the waitlist or contact us, we collect the email address you provide and a timestamp for the interaction. If you place an order through Stripe Checkout, Stripe returns to us a transaction record with the email you used, the size you selected, the dollar amount, and the order status — but never your card number, expiration date, or CVV. Those details never touch our servers.
If you simply visit the site, we collect anonymous analytics: a randomly generated visitor identifier stored in your browser's localStorage under the key polsia_vid, plus the page URL and a timestamp of the visit. No name, no email, no IP address, no third-party tracking cookies. You can clear that localStorage entry at any time without affecting your experience.
Email addresses from the waitlist are used to (a) send a confirmation email when you sign up so we can verify the address, (b) deliver a short three-email drip sequence — welcome message, educational content about bunion care, and an early-access announcement — and (c) send the launch announcement when ToeForward ships. That's it. You can unsubscribe at any time via the link in the footer of any email.
Order records are used to fulfill your purchase, contact you if there is a shipping delay, and process refunds under our 60-day money-back guarantee. Anonymous analytics tell us which pages people find useful and which they don't, so we can write more of the former and fix the latter. We do not use analytics to profile individuals.
We do not sell or rent your email address or any other personal information to third parties. We do not share your data with advertisers, data brokers, or marketing networks. We do not run third-party ad retargeting pixels on this site. We do not buy or sell pre-built marketing lists. The data we collect serves ToeForward's relationship with you as a customer — and nobody else.
If we are ever acquired or merged with another company, we will notify you by email before any change to how your data is handled — and you will have the option to request deletion before the transfer completes.
Payments are processed by Stripe Checkout. When you click "Buy now" on the product or pricing page, you are taken to a Stripe-hosted payment page where you enter your card details directly into Stripe's infrastructure. ToeForward never receives your full card number, expiration date, CVV, or bank account information. Stripe returns to us only the order metadata we need to fulfill your purchase: email, item, size, and transaction status.
Stripe's handling of card data is governed by their own privacy policy and PCI-DSS compliance program. If you have questions about how Stripe stores or processes your payment information, please review stripe.com/privacy.
The analytics beacon on this site sets a single value in your browser's localStorage under the key polsia_vid. That value is a randomly generated UUID used to count unique visitors — it contains no personal information, and it is not transmitted to any third party beyond the beacon endpoint at polsia.com/api/beacon/pixel. We do not set marketing cookies, advertising cookies, or cross-site tracking cookies.
If you prefer not to be counted, you can block the beacon by disabling JavaScript, using your browser's tracking-protection settings, or clearing the polsia_vid localStorage entry. None of these will prevent you from using the site, browsing the product page, or placing an order — the analytics beacon is purely informational.
You have the right to know what we have stored about you, to correct it if it's wrong, and to ask us to delete it. If you joined the waitlist and would like us to remove your email, just email support@toeforward.com with the address you signed up with and we'll delete it within five business days. If you placed an order and need a copy of your transaction record, email us with your order email and we'll send it back.
California residents have additional rights under the CCPA, including the right to opt out of "sale" of personal information — which, as noted above, we do not do. European visitors have additional rights under the GDPR, including data portability and the right to lodge a complaint with a supervisory authority. We honor these requests the same way we honor any other: by responding promptly and clearly.
If we make a material change to this privacy policy — for example, adding a new category of data collection or working with a new subprocessor — we will update the "Last updated" date at the top of this page, add a brief note explaining what changed, and, where appropriate, notify active customers by email before the change takes effect.
Non-material changes (clarifying language, fixing a typo, reordering existing sections) will be reflected in the "Last updated" date but not announced by email.