Privacy

What we keep, what we don't.

The short version: we keep an email if you give us one, a visitor ID so the site remembers you between visits, and what you click. We don't sell your data. The longer version is below. Last updated 2026-04-28.

Who we are

habb is a brand operated by Valiso Ventures LLC, a Delaware limited liability company. Mailing address: 800 N King Street, Suite 304-3217, Wilmington, DE 19801. Reach us at hello@habb.co.

What we collect

Email and phone — only if you submit them through a form (waitlist, quiz, journal, ambassador application). Phone is optional.
What you said — your quiz answers, your ambassador application fields. Same form you filled in.
A visitor ID — a random string we save in your browser so the site remembers you between visits. No name, no email, no number.
Analytics events — pages you saw, what you clicked, scroll depth, the source you came from (referrer, ad campaign tag). Used to understand what is working on the site.
Order details — when checkout opens, your shipping address, billing details, and what you bought. Payment is processed by Stripe; we never see full card numbers.

Why we collect it

To send you the email you asked for (waitlist confirmation, journal, ambassador updates).
To recognize returning visitors so the site behaves consistently.
To measure which pages and which campaigns lead to subscriptions, so we don't waste money on ones that don't.
To process and ship orders once checkout opens.

Who else sees it

Klaviyo — email/SMS service. Receives email, phone, your form fields, and your subscribe events.
Stripe — payment processor. Receives billing and shipping details when checkout opens (not yet live).
Vercel — site host. Sees server logs (IP, user agent, request path).
Meta, Google, TikTok — only if you grant marketing consent. Receives anonymous event signals to measure ad performance.

We do not sell your personal information. We do not share it with data brokers. Service providers process data on our instructions only.

How long we keep it

Email and form data: as long as you are subscribed. Unsubscribe and we will delete the profile within 30 days unless we are legally required to keep records (orders, tax). Server logs: 30 days. Analytics events: 14 months.

Your rights

See what we have on you. Email hello@habb.co from the address on file; we will reply within 30 days.
Have it deleted. Same email. We will confirm when it's done.
Correct it. Same.
Stop us from selling or sharing it (CCPA/CPRA). Use the form at /do-not-sell. We do not sell, but the form lets you opt out of marketing-grade analytics fan-out as well.
Withdraw your consent. Use Manage cookies at the bottom of any page. Set or change your choice anytime.

If your browser sends a Global Privacy Control (Sec-GPC) signal, we treat it as opt-out from marketing automatically.

Children

habb is not directed to children under 16 and we do not knowingly collect their data.

Changes to this notice

We will update the "Last updated" date when we change this notice. Material changes will be flagged on the next email we send you.

Pre-launch note

This page is the working summary while our supplement-DSHEA attorney finalizes the long-form policy. The facts above describe what actually happens. The long-form version will land before paid advertising goes live.