Updated September 13, 2026
What we collect when you use these sites, why, and who else handles it. It is short because we collect very little.
Who we are
Heavy Artillery is a brand of Matchless Web Studio LLC. This page covers heavyartillery.io, frankenstack.heavyartillery.io, spotter.heavyartillery.io and the shop at shop.heavyartillery.io. Questions about it go to [email protected].
When you fill in a form
Our forms ask for your email address and, on some forms, your first name. The Frankenstack Score also sends your answers, your score and its tier with your email address. Everything you submit is stored in SureContact, the service that runs our forms and sends our email through Postmark.
We use it to send what you asked for and the short email series that goes with it. Every email has an unsubscribe link, and unsubscribing stops the series.
Analytics
We count visits with Fathom Analytics. Fathom does not use cookies and does not collect personal information; we see totals such as page views and referrers, never individual visitors.
The shop counts visits with Cloudflare Web Analytics instead, which also works without cookies and reports totals only.
Services that see your request
Cloudflare hosts heavyartillery.io, frankenstack.heavyartillery.io and spotter.heavyartillery.io and sits in front of the shop, so it processes the technical details of each request, such as your IP address, to deliver the page and protect it from abuse. The shop itself runs on a WordPress server managed through GridPane, which sees the same details. The other three sites load their fonts from Google Fonts, so Google receives the same kind of request information when your browser fetches them; the shop serves its own fonts.
Buying from the shop
Checkout asks for your email address and your full name. SureCart, the service that runs the shop, stores them with your order, your downloads and your customer account, and sends your receipt and order emails. While you check out, SureCart keeps your cart in your browser’s local storage.
Your card details go to Stripe, which processes the payment; they never reach our servers. Stripe’s payment form sets its own cookies and runs fraud checks, which can include an hCaptcha challenge, and shows Google Pay where your browser offers it.
When an order completes, your name, email address, language setting and what you bought are also recorded in SureContact, so we can send the email series for that product and stop it if you are refunded. Every email in the series has an unsubscribe link. Unsubscribing stops the series; your receipt and order emails still arrive, because they are part of your purchase.
You sign in to your customer dashboard with a link sent to your email address. Once you are signed in, WordPress sets the cookies that keep you signed in.
Your choices
We do not sell your information. To see what we hold about you, correct it or have it deleted, email [email protected] and we will do it.
We keep form submissions until you unsubscribe or ask us to delete them. We keep order records (your name, email address, what you bought, the amount and the date) for as long as tax and accounting rules require. When you ask us to delete your information, we delete everything we are not required to keep, including your email subscriptions; your order records follow once we no longer have to keep them.
If you are in the EU or UK
Data protection law gives you the right to a copy of the information we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to take it elsewhere. We use your order details to deliver what you bought, and send an email series because you asked for it or bought the product it belongs to; you can stop a series at any time by unsubscribing. The services named on this page may process your information outside your country, including in the United States. To use any of these rights, email [email protected]. You can also complain to the data protection authority where you live.
