Privacy Policy

This Privacy Policy explains how World of Can Making, LLC (WCM), branded as World of Cans, collects, uses, discloses, and protects personal information in connection with worldofcans.com and any private, login‑restricted areas (the “Website”).

This Policy applies to visitors and account holders who access public pages and private/restricted areas enabled by WCM.

Information you provide to us

• Account profile: name and email (we invite users by email and store name/email).

• Communications: messages you send to us (e.g., support requests).

Authentication (Auth0)

• We use Auth0 to authenticate users. WCM does not store passwords; Auth0 processes authentication and related security data.

Automatically collected data

• Analytics (GA4): page views, events, device/browser type, approximate location (derived from IP), and similar usage metrics.

• Cookies/Similar technologies: used for authentication (via Auth0) and analytics (GA4). Where required by law (e.g., EEA/UK), we obtain consent.

• Server/hosting logs: may include IP address, timestamps, requested URLs, and user‑agent; maintained by our hosting/CMS stack for security and operations.

Newsletter/marketing

• If you subscribe, we process your email via Beehiiv and send you newsletters. You can unsubscribe any time via the link in the email.

Business operations

• CRM: We may store basic contact history (e.g., company name, notes tied to your email).

We do not collect payment card details on the Website. Any billing occurs off‑site.

• Provide, secure, and operate the Website (including private/restricted areas).

• Create and manage accounts and invitations; authenticate users (via Auth0).

• Enforce role‑based or user‑specific access to gated content.

• Respond to inquiries and provide support.

• Analyze usage to maintain and improve the Website (GA4).

• Send newsletters and product updates if you subscribe (Beehiiv).

• Protect against fraud, abuse, and security incidents; comply with legal obligations.

Auth cookies enable login sessions. Analytics cookies (GA4) measure Website use. You may adjust browser settings or withdraw/decline analytics cookies where consent is required. We honor legally required signals/choices (e.g., consent preferences, where applicable).

We disclose personal information to:

• Service providers/processors: Auth0 (authentication), DigitalOcean (hosting), Google Analytics 4 (analytics), Beehiiv (email/newsletters), and other vendors that support the Website.

• Compliance & safety: to comply with law, respond to lawful requests, or protect rights, safety, and security.

• Business transfers: in connection with a merger, acquisition, or similar transaction.

We do not sell or share personal information for cross‑context behavioral advertising/retargeting.

We operate in the United States and may transfer personal information to the US and other countries. Where required, we use recognized transfer safeguards (e.g., Standard Contractual Clauses, or other mechanisms recognized by applicable law) for data received from EEA/UK/other regions.

• Account profile (name/email): kept while your account is active. If you request deletion, we delete from our systems and instruct processors to do the same, subject to limited retention required by law or to maintain suppression lists for email opt‑outs.

• Server logs: retained for a limited period for security/operations, then deleted or anonymized.

• Backups: retained for a limited cycle and then overwritten.

• Newsletter data: retained until you unsubscribe or we no longer need it.

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the data and our services, including TLS in transit, authentication via Auth0, role‑based access, and access controls with reputable service providers. No method of transmission or storage is 100% secure.

Depending on your location, you may have rights such as access, correction, deletion, portability, restriction/objection, and to withdraw consent (where processing is based on consent).

• US State Rights (e.g., CA/CO/CT/VA and similar): you may request access, deletion, correction, and portability; and opt out of sales/sharing/targeted advertising (we do not sell or share). You may appeal a decision where applicable.

• EEA/UK: you may exercise GDPR rights as above and object to processing based on legitimate interests.

Submit requests to contact@worldofcans.com. We may need to verify your identity. We will not discriminate against you for exercising your rights.

The Website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will delete it.

The Website may link to third‑party sites. Your use of those sites is governed by their terms and privacy policies; WCM is not responsible for their content or practices.

We may update this Policy from time to time. We will post the updated Policy with a new Effective Date.

World of Can Making, LLC (WCM)

Email: contact@worldofcans.com