This policy explains how Wacky Engineering LLC (“Wacky Engineering,” “we,” “our,” and “us”) handles personal information when you use wackyengineering.com, contact us, use the local shopping cart, or enter a Wacky Engineering sweepstakes (collectively, the “Services”).
Wacky Engineering controls the website, support, and sweepstakes information described here. Fourthwall, Inc. is the seller and Merchant of Record for merchandise purchases. Fourthwall handles checkout and may act both as an independent business for its transaction obligations and as a service provider processing certain order information for us. Review Fourthwall’s Privacy Policy before purchasing.
CORE Family Hub is a Wacky Engineering service reached through core.wackyengineering.com . The CORE Privacy Addendum below supplements this general policy and controls if the two conflict about CORE data.
SECTION 01
What information do we collect?
Information you provide directly
- Order information: Name, email address, billing or shipping address, phone number, order identifiers, purchased products, and support history associated with a Fourthwall merchandise order.
- Payment information: Fourthwall and the payment methods offered through its checkout collect and process payment credentials. Wacky Engineering does not receive or store complete credit-card numbers on this website.
- Sweepstakes entry data: For mail-in entrants, handwritten names, physical mailing addresses, phone numbers, email addresses, and the required eligibility certification on index cards.
- Communications: Your email address and the information you include when you email us or otherwise communicate with us.
Information collected automatically
Vercel Web Analytics provides aggregated, anonymized information including page paths, referrers, filtered query parameters, approximate geographic region, device type, operating system, browser, and event time. We also record selected interaction events—such as shop clicks, product views, add-to-cart actions, and links to Wacky Engineering channels—together with a short, non-personal label. Vercel Web Analytics does not use cookies or retain a persistent cross-site visitor profile.
We use Google Tag Manager to manage measurement technology on the website. When Google Analytics is enabled through Tag Manager, Google may process page URLs and titles, referrers, timestamps, browser and device information, approximate location derived from network information, analytics identifiers, and selected interaction events. Google Analytics may set first-party cookies such as _ga and related cookies to distinguish visits. We configure analytics events not to include names, email addresses, order numbers, payment information, or other information that directly identifies you.
Your browser stores product names, options, quantities, prices, image references, and a Fourthwall checkout-cart identifier so the local cart can work and confirm whether an externally hosted checkout remains active. When you check out, the selected product and quantity information is sent to Fourthwall.
The website stores your light or dark theme choice in local storage and in a first-party preference cookie named wacky-theme. The cookie expires after one year unless you clear it or return to the system theme.
SECTION 02
How we use your information
- Operate the website, cart, checkout handoff, and requested features.
- Coordinate merchandise orders, fulfillment, support, returns, and fraud prevention with Fourthwall.
- Respond to questions and other communications.
- Measure aggregated traffic and selected site interactions so we can improve navigation, products, and content.
- Administer sweepstakes, verify eligibility and entry limits, contact potential winners, publish required winner information, and deliver prizes.
- Protect the Services, enforce our terms, comply with law, and establish or defend legal claims.
Legal bases for EEA and UK visitors
Where European or UK data-protection law applies, we process information as necessary to perform a contract or take requested pre-contract steps, comply with legal obligations, pursue legitimate interests such as operating and securing the Services, or act with consent where consent is required. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
Sweepstakes entry data stays purpose-limited.
For the Wacky Engineering LLC 3D Printer Sweepstakes, names, addresses, phone numbers, and email addresses are used only to administer the drawing, verify eligibility, check aggregate entry caps, notify the winner, and ship the prize.
Email addresses and phone numbers provided on mail-in cards are never added to general marketing newsletter lists.
SECTION 04
Browser storage, cookies & analytics
- Theme preference: Stored locally and in the first-party
wacky-themecookie for up to one year. - Shopping cart: Stored in your browser until you remove the items or clear browser storage.
- Checkout identifier: Stored locally so the site can determine whether a Fourthwall checkout cart is still active.
- Vercel Web Analytics: Uses anonymized, aggregated data without cookies. We configure custom-event labels not to contain names, email addresses, order numbers, or other personal information.
- Google Tag Manager: Loads and manages the measurement tags we configure. Tag Manager is a container; the technologies loaded through it determine what information is collected or stored.
- Google Analytics: When enabled, may use first-party analytics cookies and similar identifiers to measure visits, page use, and selected interactions. Cookie duration and event-data retention depend on our Google Analytics settings and your browser or consent choices.
For more information, review how Google uses information from sites that use its services . Google also offers a Google Analytics opt-out browser add-on .
Do Not Track and Global Privacy Control
Because there is no common industry standard for browser “Do Not Track” signals, the website does not change behavior in response to them. We do not currently configure Google tags for advertising personalization or use cross-site behavioral advertising. Where legally required, we treat a recognized Global Privacy Control signal as a request to opt out of sale or sharing; Wacky Engineering does not currently engage in either activity.
You can clear the theme preference and cart through your browser’s cookie and site-data controls. Disabling browser storage may prevent the theme and cart from working as expected.
SECTION 05
How long we keep information
We keep personal information only while it is reasonably needed for the purpose collected and for applicable accounting, tax, fraud-prevention, warranty, dispute, limitation-period, and legal obligations.
- Orders: Fourthwall retains transaction information under its own policy. We retain order and support records available to us while needed to assist the customer, reconcile sweepstakes entries, maintain business records, or resolve disputes.
- Communications: Kept while the request is active and afterward when reasonably needed for support history, fraud prevention, or legal claims.
- Sweepstakes: Mail-in cards and entry records are retained until the winner is verified, the prize is delivered, the winner-list request period ends, and any reasonably anticipated audit, dispute, or legal retention period has passed. Physical cards are then shredded and electronic working files are securely deleted or de-identified.
- Analytics: Vercel retains aggregated analytics under its service settings. Google Analytics event and user-level data are retained according to the retention period configured in our Google Analytics property; aggregated reporting may be retained longer.
- Local storage: Controlled by your browser as described above.
SECTION 06
Your privacy rights
Depending on your location and subject to legal exceptions, you may have rights to know or access personal information, correct inaccurate information, request deletion, receive a portable copy, restrict or object to processing, withdraw consent, or appeal a denied request. You may also have the right to use an authorized agent or complain to a data-protection authority.
To make a request, email info@wackyengineering.com with the subject “Privacy request.” Describe the request and the Services you used. We may ask for information reasonably necessary to verify your identity or an agent’s authority. We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.
For information controlled by Fourthwall, including checkout and payment information, submit the request directly under Fourthwall’s Privacy Policy .
SECTION 07
Security & children
We use reasonable administrative, technical, and physical safeguards appropriate to the information we handle. No website, email system, transmission, or storage method can be guaranteed completely secure.
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through this website. Sweepstakes eligibility is limited to adults as stated in the applicable Official Rules. If you believe a child provided personal information, contact us so we can investigate and delete it when appropriate.
SECTION 08
International transfers
Wacky Engineering is based in the United States, and the Services and their providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, transfers are made using legally recognized safeguards or another lawful transfer mechanism.
SECTION 09
Policy changes & contact
We may revise this policy as the Services, providers, or legal requirements change. The updated date at the top identifies the current version. If a change materially affects how previously collected personal information is used or disclosed, we will provide additional notice when required.
Questions, concerns, or requests may be sent to:
Wacky Engineering LLC
Attn: Privacy
PO Box 223
Valley Center, KS 67147
info@wackyengineering.com
CORE PRIVACY ADDENDUM
CORE Family Hub Privacy Addendum
This addendum applies to the hosted CORE Family Hub service operated by Wacky Engineering, including core.wackyengineering.com and official preview environments. It supplements the general Wacky Engineering Privacy Policy. If this addendum conflicts with the general policy about CORE data, this addendum controls.
CORE data and purposes
CORE is a shared household organizer. Depending on the features a household uses, CORE processes:
- Account and access data: email, authentication identifiers, household role, invitations, policy acknowledgments, and security events for sign-in, authorization, support, and abuse prevention.
- Household and family-profile data: household name, family member nickname or name, role, profile icon/color/avatar, birthday, adult PIN hashes, and shared-display settings for personalization and access control.
- Household content: calendars, chores, rewards, groceries, pantry inventory, meal plans, recipes, lists, notes, whiteboards, maintenance tasks, chat content, feedback, uploaded logos, and screensaver photos to provide the features selected by the household.
- Location and device data: adult-selected location or approximate coordinates, time zone, weather results, browser/device information, push endpoints, session data, logs, build version, and diagnostic errors for local context, notifications, security, and reliability.
- Optional integration data: Home Assistant entity identifiers, states, rooms, and commands; Kroger/Dillons authorization, store, and cart information; and approved prompt/context data and AI output when the household enables those features. CORE never receives or stores the user’s Kroger password.
- CORE Community data: a pseudonymous Community name, submitted recipe snapshot, contribution consent version and time, moderation state, imports, and ratings.
Household content is private by default. CORE does not sell household information or share it for cross-context behavioral advertising.
Providers and optional services
CORE uses Supabase for authentication, database, private storage, realtime, and server functions; Vercel for frontend hosting and delivery; browser/device push services; Open-Meteo for selected-location weather and geocoding; and Nager.Date for public-holiday information.
When specifically enabled or invoked by a household, CORE may interact with Google Gemini for AI responses, Kroger/Dillons for grocery actions, and the household’s own Home Assistant installation for allowlisted smart-home status and commands. Each provider has its own terms and privacy practices. CORE sends optional-feature data only when the household enables or invokes the feature.
Privileged operational access
Household information is not routinely reviewed. Authorized Wacky Engineering personnel and service providers with privileged system access may technically access database records, uploaded files, logs, and other household information only when reasonably necessary to operate or secure CORE, troubleshoot a reported problem, respond to a privacy or support request, investigate abuse or a security incident, enforce the Terms, protect users or the service, or comply with law. Privileged access is restricted through appropriate authentication and access controls.
Information CORE is not designed to store
CORE is intended for ordinary household organization. Do not use CORE as a system of record for Social Security numbers, government identification, payment-card or bank credentials, tax records, passwords or private authentication keys, detailed medical or clinical records, legal-privileged documents, intimate images, surveillance recordings, or other highly sensitive or regulated information. Supported third-party credentials should be entered only through the designated integration controls. Ordinary household context—such as an appointment title, allergy, food preference, or medication reminder—is permitted, but CORE is not a medical-record system.
Children and managed profiles
CORE is a general-audience household service intended to be established and administered by an adult. Children and teens may not create or receive individual CORE sign-in accounts. An adult may create and control a managed family profile and allow supervised use of a household shared display. Managed-profile information may include a nickname or name, birthday, avatar, chores, rewards, events, and activity associated with that profile.
A parent or guardian can review, correct, export, or delete a managed child’s information in household settings or by contacting Wacky Engineering. CORE does not knowingly sell or behaviorally advertise using children’s information. If Wacky Engineering learns that a minor created or received an individual sign-in account, it will investigate and delete or restrict that account and associated information as appropriate.
Community privacy and deletion
A household recipe stays private unless a signed-in adult deliberately submits a snapshot and checks the current Community consent box. Nothing is discoverable until approved. Pending submissions and accompanying images are intentionally reviewable by authorized moderators for approval, safety, privacy, rights, and policy review. The catalog exposes the approved recipe and Community name, not the contributor’s email, household, account identifier, or Family Profile. Contributors should use a pseudonym and avoid personal information in recipe content.
Withdrawal hides a listing immediately. A permanent-deletion request hides it immediately and queues the Community-hosted content for deletion after a 30-day security and audit period, subject to legal preservation needs. Independent copies already imported into other households cannot be recalled.
Retention, security, and rights
CORE keeps active household information while needed to provide the service and as directed by authorized household users. Limited data may remain temporarily in provider backups, security logs, fraud records, or legal records. CORE uses role-based authorization, database row-level controls, restricted server functions, private storage, server-verified PINs, dedicated display identities, input validation, rate limits, and encrypted network transport.
Depending on location, a person may have rights to know, access, correct, export, delete, restrict, object, or appeal, and to avoid discrimination for exercising a privacy right. Requests are verified to protect the household.
Security incidents
If Wacky Engineering learns of unauthorized access to information, it will investigate, take reasonable containment and remediation measures, and provide notices required by applicable law. No online service can guarantee absolute security.
CORE privacy contact
Wacky Engineering LLC
Attn: CORE Privacy
PO Box 223
Valley Center, KS 67147
info@wackyengineering.com
See the CORE in-app Privacy Policy , the CORE Terms Addendum, and the CORE Community Contribution Terms.