Privacy Policy | Exotic Dog Treats

This Privacy Policy explains what information exoticdogtreats.com (this "Site") collects, how it is used, and the choices you have. The Site is owned and operated by Sniff & Shift LLC ("Sniff and Shift", "we", "us" or "our"), PO Box 126, Devault, PA 19432, US.

The short version

You can read this Site without giving us your name, email or any account details.
If you choose to join our email list, your email address goes to the customer list of our Shopify store so we can send you Sniff and Shift emails. Every email has an unsubscribe link. Joining is separate from the analytics choices below.
We use analytics to see which pages are useful and whether the cart works. They run only after you select Accept in the banner, wherever you are. If you choose No thanks or never answer, they do not load. We do not use advertising pixels on this Site.
Your cart is saved in your own browser until you check out.
Checkout, payment, your account and your orders happen on sniffandshift.com, our Shopify store. Information you give there is covered by the Sniff and Shift Privacy Policy.
We do not sell personal information collected on this Site, and we honor the Global Privacy Control signal.

Where this policy applies, and where the store policy takes over

This policy covers your visit to exoticdogtreats.com. When you select Checkout, Sign in or Create account, your browser goes to sniffandshift.com. From that point, Sniff and Shift's store Privacy Policy governs what is collected, including the contact, order, account, payment confirmation and support information described there. Payment details are collected by Shopify and its payment processors, never by exoticdogtreats.com.

What this Site collects

Information you give us

This Site has no account system. Its only form is the optional email sign up described in Email sign up. If you email or call us, we receive whatever you choose to include, such as your name, email address, phone number and your question. We use it to answer you and keep a record of the conversation.

Information stored in your browser

Name	Type	What it does	How long
ex_consent	First-party cookie	Remembers whether you accepted or declined analytics (the value is "granted" or "denied"), so the banner does not reappear on every page.	180 days, or until you reset it on the Your Privacy Choices page.
ex_cart_v1	Browser storage (localStorage)	Holds the products, sizes, quantities, any purchase option and the prices shown, so the cart survives a page reload. It is not meant to hold personal information, stays on your device, and is sent only when you choose Checkout.	Until you empty the cart, check out, or clear your browser data.
Theme setting	Browser storage (localStorage, key ex-theme)	Remembers whether you chose light or dark mode.	Until you clear your browser data.
ex_signup_dismissed	Browser storage (localStorage)	If you close the email sign up box, remembers the time you closed it so the box stays away. It holds a time and no id.	30 days, then the box may show again.
ex_signup_done	Browser storage (localStorage)	After you join the email list, remembers that you joined so the box never shows again. It holds the value 1, not your email address.	Until you clear your browser data.
ex_signup_seen	Browser storage (sessionStorage)	Remembers that the email sign up box was already offered in this tab, so it does not appear on every page. It holds the value 1.	Until you close the tab.
ex_utm	Browser storage (sessionStorage)	If you arrived from a link with campaign tags (source, medium, campaign name), remembers those tags for this tab so the checkout link can carry them. No personal information.	Until you close the tab.

These items are needed for the Site to work as you asked, so they are set without a consent prompt. They do not identify you.

Analytics (only after you accept)

The tools in this section, and the Google ad click step below, are off for every visitor in every country until you select Accept in the banner. Before you accept, none of them load, no analytics cookie or visitor id is created, and nothing about your visit is sent to them. If you choose No thanks or never answer, they stay off.

Accept turns them on for this browser, and we remember that choice.
No thanks keeps them off, and we remember that choice. If you accepted earlier, No thanks stops them at once and deletes their cookies and ids from your browser.
Global Privacy Control: if your browser sends this signal, none of these tools load, even if you accepted earlier. The banner shows a note instead of an Accept button.
Do Not Track: if your browser sends this signal, these tools stay off unless you select Accept yourself.

Google Analytics 4. We use Google Analytics, provided by Google LLC, to count visits, see which pages are read, and measure shopping steps such as viewing a product, adding to the cart, opening the cart and starting checkout. Google Analytics sets its own cookies (named _ga and _ga_ followed by an id) and receives your IP address, device and browser details, and the pages you view. We load it with Google signals and ad personalization turned off, and with advertising storage denied, so this Site does not send Google data for advertising. When you accept, the page tells Google your consent setting (analytics storage allowed; advertising storage, ad user data and ad personalization not allowed), and Google receives that setting with the measurements. This Site has no Google Ads, remarketing or other advertising tags. This Site and sniffandshift.com share one Google Analytics property. When you follow a link from this Site to sniffandshift.com, Google Analytics adds a short code to the link (the _gl parameter) so that your visit continues as one session across both sites. Google's use of this information is described at https://policies.google.com/privacy, and you can install Google's opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.

Google ad clicks. Sniff & Shift may advertise exoticdogtreats.com on Google Search. When you arrive from one of those ads, Google adds a click identifier to the link (named gclid, gbraid or wbraid). Before you select Accept, the identifier stays only in the open page and is not stored in your browser or passed on. Only after you select Accept, and only if your browser does not send a Global Privacy Control signal, we keep that identifier for this tab (session storage) and in a first-party cookie (ex_adclick, 90 days) and add it to the checkout link on sniffandshift.com, so Sniff & Shift can tell whether an ad led to an order. If you choose No thanks, reset your choice, or send Global Privacy Control, the identifier is not passed on and the cookie and the tab copy are deleted. This Site still runs no advertising pixels or remarketing tags.

Sniff and Shift first-party analytics. We run our own small analytics service at bundles.sniffandshift.app, the same one used on sniffandshift.com. It receives the pages you view and shopping steps on this Site, tied to a random visitor id (ex_sid, kept in your browser storage for 30 days) that does not contain your name or contact details. It records an approximate location (country, region and city) that Cloudflare derives from your connection, but it does not store your IP address. It does not use fingerprinting, which means it does not read details about your device, screen, fonts or plugins to recognize you. If you sign in to sniffandshift.com, the store side may link your customer number to your visits in hashed form, as the store Privacy Policy describes. Records are deleted automatically after 395 days (about 13 months). This data is used only inside Sniff and Shift and is not shared.

Ahrefs Web Analytics. We use Ahrefs Web Analytics, provided by Ahrefs Pte. Ltd., to count page views and see which search results and sites send visitors. Ahrefs describes this tool as cookieless: it does not set cookies and does not store personal identifiers. Like the other analytics tools, it loads only after you accept.

Hosting and security

This Site is hosted on Cloudflare. When your browser asks for a page, Cloudflare necessarily processes technical information such as your IP address, browser type, the page requested and the time, in order to deliver the page and to protect the Site against abuse and attacks. Cloudflare handles this information under its own privacy policy at https://www.cloudflare.com/privacypolicy/. Sniff and Shift does not use it to identify visitors.

Product reviews

Reviews shown on this Site, if any, are customer reviews of Exotic Dog Treats products collected by Judge.me on sniffandshift.com. We show the reviewer's display name as published there. Reviews are not collected on exoticdogtreats.com.

The email sign up box offers 10% off your first order on sniffandshift.com. Joining is optional, and you can use this Site and check out without it.

What is collected. The email address you type, the page you joined from, and the fact that you joined on exoticdogtreats.com. Nothing else is asked for.

Where it goes. Your browser sends these details to Sniff and Shift's own sign up service at bundles.sniffandshift.app. That service adds you to the customer list of our Shopify store, sniffandshift.com, with your email marketing consent recorded as subscribed, and with the tags "newsletter", "site:exoticdogtreats.com" and "signup:microsite" so we know where you joined. The sign up service does not keep your email address. For counting sign ups it keeps a salted hash of the address (a one way scrambled code that cannot be read back as the address) with the site, the page and the date. To stop abuse it limits how often one connection or one address can try to join, which means it briefly uses your IP address and email address for that check.

Why. To send you Sniff and Shift emails, such as news, new treats and offers, and to show you the first order code. Once you are on the store customer list, the store Privacy Policy covers how our emails are sent. We do not sell your email address.

How to stop. Every email we send has an unsubscribe link. You can also email support@sniffandshift.com. Unsubscribing stops marketing emails; to have your customer record deleted as well, ask us as described in Your privacy rights.

Separate from analytics. Joining does not turn on analytics, and declining or resetting analytics does not remove you from the email list. Your email address is never sent to Google Analytics, our analytics service or Ahrefs. If you accepted analytics, Google Analytics receives only an event saying that a sign up happened, with no email address or other details about you.

How long it is kept. Your customer record on sniffandshift.com is kept as the store Privacy Policy describes, until you ask us to delete it. The browser storage items for the sign up box are listed in the table above.

How we use information

We use the information above to run and secure the Site, keep your cart and settings, send Sniff and Shift emails to people who join our email list, understand which pages help people choose treats, check that the cart and checkout links work, answer questions you send us, and meet legal obligations. We do not use information from this Site to show you advertising on other websites.

Links to checkout and attribution

Checkout links from this Site to sniffandshift.com carry labels that tell the store a visit came from exoticdogtreats.com (utm_source, utm_medium, utm_campaign and utm_content values that name this Site and the page, plus ref=exoticdogtreats). If you accepted analytics, Google Analytics also adds its _gl code. If you arrived from a link with campaign tags (for example one of our ads), the checkout link carries those tags (source, medium and campaign name) in place of ours. These labels describe the link, not you. Once you arrive, the store records them as part of your visit under its own Privacy Policy.

How information is disclosed

We disclose information from this Site only to service providers that help us run it: Google (analytics), Ahrefs (analytics) and Cloudflare (hosting and security), to Shopify when you join our email list (it holds our customer list), and to Shopify and our payment processors when you choose to check out. We may also disclose information to comply with the law, respond to lawful requests, protect our rights and the safety of others, or as part of a business transaction such as a merger or sale, as described in the store Privacy Policy.

We do not sell personal information collected on exoticdogtreats.com, and apart from the one step below we do not share it for cross-context behavioral advertising (targeted ads based on your activity across websites). The one advertising-related step is the Google ad click identifier described above. We pass it to our checkout on sniffandshift.com only to measure whether our own Google ads led to an order, but under some state privacy laws this may be considered "sharing". It happens only after you select Accept, and never when Global Privacy Control is on. You can opt out at any time: choose No thanks in the banner (the Cookie settings link at the bottom of every page opens it again), or turn on Global Privacy Control. Do Not Track also keeps it off unless you accept. Our Your Privacy Choices page is the opt out link for this Site. The store Privacy Policy explains that sniffandshift.com has sold or shared some information for advertising, and how to opt out there. See Your Privacy Choices for both sites.

Global Privacy Control and Do Not Track

This Site recognizes the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a request to opt out of sale and sharing for that browser, and none of our analytics tools load and the ad click identifier is not passed on, even if you accepted analytics earlier. This applies in every country. While GPC is on, the banner shows a note instead of an Accept button. This Site also respects the Do Not Track signal in every country: if your browser sends it, analytics start off, and they turn on only if you choose Accept yourself. You can learn more about GPC at https://globalprivacycontrol.org/. (sniffandshift.com honors GPC but not Do Not Track; see the store Privacy Policy.)

Your privacy rights

Depending on where you live, including California, Colorado, Connecticut, Virginia and other US states with privacy laws, you may have the right to:

know and access the personal information we hold about you;
delete it;
correct it;
opt out of sale or sharing, and of targeted advertising;
receive a copy in a portable format;
limit or restrict how it is processed;
withdraw consent where we rely on consent; and
appeal if we decline your request, by replying directly to our decision.

These rights are not absolute and may apply only in certain circumstances, as the store Privacy Policy explains. We will not discriminate against you for using them. We may need to verify your identity, for example by confirming your email address or order details, before we answer. You may use an authorized agent; we will ask for proof that you authorized them and may ask you to verify your identity directly. We respond within the time the law requires.

Apart from the optional email sign up, this Site does not ask for your name or email, so most of what it collects cannot be tied to you. If you joined our email list, your address is held on the store customer list, and you can ask us to access or delete it. Analytics data is held under random ids. Choosing No thanks, or resetting your choice on the Your Privacy Choices page, turns analytics off and deletes the Google Analytics cookies, our visitor id and the ad click cookie from your browser. After a reset the banner shows again, and analytics stay off unless you select Accept. Data already sent is held under random ids; contact us if you want help with a request about it.

Children's data

This Site is not intended for children, and we do not knowingly collect personal information about children. If you are a parent or guardian and believe your child has given us personal information, contact us and we will delete it. We do not have actual knowledge that we sell or share personal information of anyone under 16 years of age.

Security and retention

No security measure is perfect, and information sent over the internet may not be secure in transit, so please do not send sensitive information by email. Our first-party analytics records are deleted after 395 days, and the visitor id in your browser expires after 30 days. Google Analytics data is kept for 14 months, the retention period set in our Google Analytics property. Messages you send us are kept as long as needed to help you, run our business and meet legal obligations, as the store Privacy Policy describes.

International visitors

This Site is run from the United States and the products ship only within the United States. If you visit from another country, your information will be processed in the United States and in other countries where our service providers operate. Where European or UK transfer rules apply, we rely on recognized transfer mechanisms such as Standard Contractual Clauses, as the store Privacy Policy describes.

Complaints

If you have a complaint about how we handle your information, contact us first. If you are not satisfied with our answer, depending on where you live you may appeal our decision or contact your local data protection authority.

Changes to this policy

We may update this policy when our practices or the law change. We will post the new version here and change the "Last updated" date.

Contact us

To ask a question or make a privacy request:

Email: support@sniffandshift.com
Phone: (267) 883-4431
Mail: Sniff & Shift LLC, PO Box 126, Devault, PA 19432, US