Your Privacy Choices

BFA Colorado controls the personal information described in this notice. This notice applies to bfacolorado.com, the BFA Colorado Firebase-hosted preview, and messages you send to us. It does not govern third-party websites that we may link to.

Our current policy is data minimization: collect only what is needed to operate the preview and answer people who contact us.

• Information you provide: your email address and the content of a message when you contact us or request release information.
• Hosting data: Firebase Hosting processes incoming IP addresses to deliver the site, detect abuse, and provide usage information. Google states that Firebase Hosting retains IP data for a few months.
• Browser state: the intro animation uses session storage to remember that it played during the current browser session. The current public preview does not use an advertising identifier.
• Optional analytics: if you choose Allow analytics, Google Analytics receives page visits, approximate location, browser and device information, and interaction events such as scrolling and outbound-link clicks. It uses first-party cookies, including _ga, to distinguish visitors and sessions. Analytics stays off and no Google Analytics tag is loaded until you opt in.
• Development-only data: the local development server can count requests by page and day without recording IP address, user agent, referrer, cookie, or visitor ID. That local counter is not the public Firebase service.
• Commerce data: none through the current public site. Checkout, customer accounts, payment collection, and order submission are disabled.

• Provide, secure, troubleshoot, and improve the website.
• Respond to questions, collaboration inquiries, privacy requests, and requests for release information.
• Protect BFA Colorado, visitors, and the public from fraud, abuse, security incidents, or unlawful activity.
• Comply with legal obligations and establish, exercise, or defend legal claims.

We do not sell personal information, exchange it for a discount, use it for targeted advertising, or profile visitors for decisions with legal or similarly significant effects.

Google provides Firebase Hosting for delivery and security and, only after a visitor opts in, Google Analytics for audience and engagement measurement. Google may use infrastructure providers identified in its subprocessors list. We may also disclose information when required by law, to protect rights or safety, or as part of a genuine business transfer subject to appropriate protections. We do not permit service providers to use information for targeted advertising on our behalf, and the BFA Analytics configuration disables Google signals and advertising personalization.

The preview does not deploy advertising cookies. Google Analytics is optional: its tag does not load until you select Allow analytics. If allowed, Google Analytics sets first-party cookies that distinguish a browser and session. Your choice is stored in this browser and can be changed below. Session storage for the intro expires with the browser session. A future server-backed cart may use a first-party, HTTP-only opaque cart cookie; the current preview products cannot be purchased.

Global Privacy Control (GPC) is recognized in Colorado for sale and targeted-advertising opt-outs. Because BFA Colorado currently performs neither activity, a GPC signal does not need to change the site’s behavior; our default already matches the requested opt-out. If those practices ever change, we will update this notice and implement the required signal handling before they begin.

Analytics is off by default. Use the controls below to keep it off or allow it on this browser. If you turn analytics off after previously allowing it, the site updates Google Consent Mode, expires the BFA Google Analytics cookies it can access, and does not load the Analytics tag on future pages.

This choice affects Google Analytics only. It does not change essential hosting, security logging, the intro animation’s session storage, or any privacy right described below.

Depending on where you live and whether a privacy law applies, you may have rights to know whether we process your personal information, access it, correct it, delete it, receive a portable copy, or opt out of sale, targeted advertising, or certain profiling. BFA Colorado will use the same request process for any visitor even when a statutory threshold may not apply.

Email a request with the subject “Privacy Request” and describe the right you want to exercise. We may ask for information reasonably necessary to verify that the request concerns you. If we deny a request, reply with the subject “Privacy Appeal” and explain why you believe the decision should be reconsidered. We will not discriminate against you for making a privacy request.

Submit a privacy request

We retain direct messages and release-interest emails only as long as reasonably needed to answer the request, maintain the requested communication, protect the service, or meet legal obligations. You may ask us to delete them. Firebase Hosting controls retention of its service logs under Google’s terms; Google currently states that Hosting retains IP data for a few months. The BFA Google Analytics property currently retains event data for two months and user data for fourteen months; Google’s retention control does not apply to standard aggregated reports.

We will not keep personal information merely because storage is available. Backup or security copies may take additional time to expire where deletion cannot be immediate.

The website is a general-audience apparel preview and is not directed to children under 13. Do not send us personal information if you are under 13. If we learn that we collected personal information directly from a child under 13 without required authorization, we will delete it. A parent or guardian may contact us about a concern.

The public website uses HTTPS for delivery. No method of transmission or storage is completely secure, so we cannot promise absolute security.

Firebase operates on global infrastructure. Information may be processed in the United States or other locations where Google or its service providers maintain facilities, subject to their contractual and legal safeguards.

We will revise this notice before introducing materially different collection, checkout, customer accounts, advertising measurement, targeted advertising, or a new service provider that changes the disclosures above. The revision date appears at the top.

Contact BFA Colorado using the email below.

Email the privacy contact