Privacy & cookies
LAST UPDATED NOVEMBER 2, 2026
Hourworn is operated by Zero Forge LLC. This notice explains how we use information when you visit hourworn.com, join the launch list, shop, or contact us. Questions and privacy requests can be sent to jeffrey@hourworn.com.
What we collect and why
- Launch list: your email address, signup time, consent time, active or unsubscribed status, and the form you used. A record may also contain a referral code and referral relationship. With your optional attribution permission, we record a referral or Instagram/TikTok source. We use the list for Hourworn launch updates and managing your subscription.
- Abuse prevention: signup records include a hash derived from your IP address and limited browser information. A hash is not a guarantee of anonymity. Hosting and security services may also process IP addresses, requested pages, timestamps, and technical error information to deliver and protect the site.
- Emails to Jeff or Hourworn: we receive your email address, message, and any details or attachments you choose to send. We use them to respond and manage the conversation. Studio’s email button prepares a message in your mail app; you decide whether to send it.
- Creator and retailer inquiries: your name, email address, channel or business name and public link, audience/customer description, proposal, acknowledgment and submission time. We store these privately in Supabase and use them to review and respond to the business inquiry. Submissions do not join the launch mailing list. We use a keyed hash of your email and the submission date to limit repeat inquiries; this is not a guarantee of anonymity. Business inquiries are retained as needed to review the proposal and manage the conversation. You can request access, correction or deletion by contacting us.
- Shopping and orders: your selected products, colors, sizes and quantities keep your bag working. Shopify processes checkout and payment information, contact details, delivery details and order records. Printify receives the order and delivery information needed for production and shipping. We use order records to fulfill purchases and provide customer support.
- Founder administration: signed-in founder activity manages stories, images, subscribers, and the site. Admin access uses an authenticated session. Photo story drafts and unpublished uploads are private.
Visit measurement
With your optional visit measurement permission, Vercel Web Analytics counts public page views, successful signup and inquiry submissions, and form errors. On the storefront, consented measurement can also record product views, selected variants, bag changes and checkout handoffs using product identifiers and quantities. Customer email addresses, payment details and checkout tokens are excluded from those website events. It provides aggregate reports about devices, browsers, referrers, and approximate countries. It uses no analytics cookies. We remove query strings and fragments from page-view URLs and exclude founder/admin pages. Choosing “Necessary only” stops future analytics events. We do not send launch-list email addresses or form contents to Vercel Analytics.
Meta advertising
Only after you opt in to Meta advertising, Meta Pixel receives public page visits from this website for advertising measurement and audiences. This can include the page URL, permitted campaign parameters, IP address, browser information and Meta cookie identifiers. Meta may associate these visits with your Meta account and use them under its own privacy policy. We do not send form contents or launch-list email addresses through this pixel. We disable automatic event configuration and send PageView only. We do not add a second Purchase event here; Shopify separately manages its existing Meta integration at checkout under its own privacy controls. At the checkout handoff, we pass refusals and browser Global Privacy Control into Shopify’s checkout URL. Website opt-ins do not grant additional Shopify tracking permissions; Shopify’s own privacy controls still apply.
Refusing advertising leaves the Meta script unloaded. Withdrawing permission stops future website tracking, clears accessible Meta cookies and reloads the page to remove the loaded script. Global Privacy Control blocks this website pixel. Withdrawal cannot recall events already transmitted. Meta may retain information under its privacy policy.
Your cookie choices
Optional browser storage is off until you choose. “Necessary only” lets you browse the site, read stories, use the GMT desk, and join the launch list. You can change your choices here or through Cookie settings in the footer.
| Storage | Purpose | Duration | Choice |
|---|---|---|---|
| hw-saved-bag-v1 | Stores your selected designs, colors, sizes and quantities in this browser. | Until removed or browser storage is cleared | Necessary shopping storage |
| hw_cart_v1 | Maintains an encrypted checkout cart session. | 7 days | Necessary shopping cookie |
| _fbp / _fbc | Meta browser and ad-click identifiers, when set after advertising opt-in. | Up to 90 days | Advertising opt-in |
| hw_consent | Remembers your cookie choices. | 180 days | Necessary |
| hw_founder | Keeps the founder signed in; only set after login. | Up to 7 days, or until logout | Necessary for admin access |
| hw_source | Remembers an Instagram or TikTok visit source. | 30 days | Attribution opt-in |
| hw_ref | Remembers a referral link. | 30 days | Attribution opt-in |
| hourworn-waitlist-joined | Local storage that remembers a signup confirmation on this device. | 30 days; expired entries are removed when checked | Preference opt-in |
Withdrawing optional permission stops future use and removes the corresponding Hourworn cookies or saved confirmation from this browser. It does not automatically delete information already submitted to the launch list. Email us to request that separately. Choices apply to this browser; another browser or device may ask again. The founder’s private prompt editor may also save working preferences locally when used.
Social links, sharing, and photos
Instagram and TikTok links open their services. Their own privacy terms apply there. We do not automatically embed their feeds. Meta Pixel loads only after the separate advertising opt-in described above. A Studio post links to social discussions only when its author adds those links; comments are not imported into Hourworn.
Only the founder can upload and publish Studio photos. Published images and captions are visible to visitors and can be saved or shared. A private email to us is not automatically published. We will seek permission before attributing a private reader contribution publicly.
The share buttons open your device’s sharing tools or copy a page link. They do not send a message automatically or collect the recipient’s address. The GMT desk uses your device clock and selected time zones; it does not request precise location.
Services that help run Hourworn
Vercel hosts the website. Neon stores launch-list records. Supabase stores Studio information and photo uploads. SendGrid sends welcome emails. Google Workspace handles our business email. Shopify provides checkout and payment services; Printify and its fulfillment providers produce and ship ordered products. Their services may use their own necessary cookies and process order information under their applicable privacy notices. These providers process information to deliver their services and may maintain technical and security logs. Information may be processed outside the country where you live.
We do not sell the launch list or disclose it to social platforms for targeted advertising. We may disclose information when required by law or when reasonably necessary to protect people, investigate abuse, or protect the service.
Retention and your requests
We keep launch-list information while it is needed to provide the requested updates and manage subscriptions. Business correspondence is retained as needed to answer requests and maintain relevant business records. Unpublished founder drafts stay available to the founder until removed. Limited information may need to be retained for legal obligations, security, or to honor an unsubscribe request. Provider backups and logs may be retained under their own retention processes.
You can ask to access, correct, or delete your information, or leave the launch list, by emailing jeffrey@hourworn.com. We may ask you to confirm control of the email address before releasing or changing records. Cookie consent is separate from launch-list signup, and declining cookies does not subscribe or unsubscribe you.
Depending on where you live, applicable law may provide additional rights, including objection, restriction, portability, or a complaint to a privacy regulator. Contact us to make a request.
Security and changes
We use HTTPS, protected founder access, and private storage for unpublished Studio files. No internet service can promise absolute security. Please avoid sending sensitive personal information that is not needed for your request.
We update this notice when our practices change and show the revision date above. If we introduce new optional tracking purposes, we will request a new choice before enabling them.