Skip to Content

Privacy Policy

Effective: July 26, 2026  ·  Last updated: July 26, 2026

This Privacy Policy explains how Extreme Targets LLC ("we," "us," or "our") collects, uses, and discloses information about you when you use www.extremetargets.com (the "Site"), our mobile application Extreme Targets (the "App"), and related services (collectively, the "Services").

By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.

Contents
  1. Information We Collect
  2. How We Use Information
  3. How We Share Information
  4. Data Retention
  5. Cookies and Tracking
  6. Marketing Communications
  7. Your Privacy Rights
  1. Security
  2. Children's Privacy
  3. Mobile Application
  4. Third-Party Links
  5. Changes to This Policy
  6. Contact Us

1. Information We Collect

Information you provide to us

  • Account information. When you create an account, we collect your name, email address, and a password. If you sign in using a third-party provider (such as Google or Apple), we receive basic profile information from that provider. Passwords are stored in hashed form and are not visible to us.
  • Profile and content. Any information you choose to add to your profile, and any files, images, text, or other content you upload to the Services.
  • Payment information. When you make a purchase, payment card details are collected and processed directly by our payment gateway, PayEngine. Card details are entered into fields hosted by PayEngine and are transmitted to PayEngine rather than to us. We do not receive or store full payment card numbers. We do receive and retain transaction records, including the amount, date, description, last four digits of the card, card brand, and billing name and address.
  • Training registration. When you register for a course or event, we collect your name, contact details, the sessions you enroll in, and your attendance and completion records. We also collect the information contained in any waiver, release, or participation agreement you sign, which may include an emergency contact name and phone number.
  • Photography and recording. We may photograph or record training sessions for instructional and promotional purposes. If you do not wish to appear in such material, tell your instructor at the start of the session and we will accommodate the request.
  • Communications. Information you provide when you contact us for support, respond to surveys, or otherwise correspond with us.

Information collected automatically

  • Usage data. Pages and screens viewed, features used, links clicked, timestamps, referring pages, and session duration.
  • Device and connection data. IP address, browser type and version, operating system, device type, device identifiers, language settings, and general location inferred from IP address (city or region level; we do not collect precise GPS location unless you affirmatively grant permission).
  • Cookies and similar technologies. See Section 5.
  • Log data. Our backend infrastructure automatically generates server, authentication, and API logs that may include IP addresses, request metadata, and error information.

Information from third parties

We may receive information about you from our authentication providers, payment gateway, and email service provider, in each case limited to what is necessary to operate the Services.

2. How We Use Information

We use the information we collect to:

  • Create and maintain your account and authenticate you;
  • Provide, operate, maintain, and improve the Services;
  • Process transactions and send related confirmations, receipts, and billing notices;
  • Send you technical notices, security alerts, and support messages;
  • Send marketing and promotional communications, where permitted (see Section 6);
  • Understand how users interact with the Services through analytics;
  • Detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or unlawful activity;
  • Comply with legal obligations, including tax and financial recordkeeping; and
  • Establish, exercise, or defend legal claims.

3. How We Share Information

We do not sell your personal information for money. We share information only as follows:

  • Service providers. We use third-party vendors that process information on our behalf under contract and are prohibited from using it for their own purposes. These include:

    • Supabase, Inc. — database, authentication, file storage, and backend infrastructure. Data is stored on cloud infrastructure located in Oregon, United States.
    • PayEngine — payment gateway services. PayEngine collects and processes payment card data directly and handles it under its own privacy policy and PCI DSS obligations.
    • Payment processors, acquiring banks, and card networks — transaction authorization, settlement, fraud and risk monitoring, and dispute resolution.
    • Odoo S.A. — our website, customer relationship management, and transactional and marketing email delivery, hosted on the Odoo.sh platform. Our production environment is located in a Google Cloud Platform data center in the United States. Backup copies are replicated across multiple data centers and may be stored outside the United States, including in Europe and Canada.
  • At your direction. Content you choose to make public or share with other users.
  • Legal and safety. When we believe disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of us, our users, or the public.
  • Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Policy continuing to apply to the transferred information.
  • With your consent. For any other purpose disclosed to you at the time.

4. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Services. After account deletion, we delete or de-identify your information within 30 days, except where we must retain it to comply with legal obligations (for example, transaction and tax records, which we retain for seven years), resolve disputes, or enforce our agreements.

Copies of your information may persist for a limited period in routine backups and in non-production environments used for testing and development, until those copies are rotated out or refreshed.

5. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to:

  • Keep you signed in and maintain your session (strictly necessary);
  • Remember your preferences; and
  • Measure usage and performance through analytics.

Website visitor tracking. Our website platform assigns a cookie to your browser and creates a visitor record that logs the pages you view, your IP address, the time of your visit, and your approximate location. If you submit a form, subscribe, or create an account, that visitor record may be linked to your contact record, which associates your earlier browsing activity on our site with your identity.

Email tracking. Our marketing and transactional emails contain a small embedded image and encoded links that tell us when a message was opened and which links were clicked. You can prevent open tracking by disabling remote image loading in your email client.

You can control cookies through your browser settings. Disabling cookies may prevent you from staying signed in or using certain features.

Global Privacy Control. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of the sale or sharing of personal information where required by applicable state law.

6. Marketing Communications

If you opt in, we may send you marketing emails. You can opt out at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@extremetargets.com. You cannot opt out of transactional messages relating to your account, security, or purchases.

7. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal information:

  • Access / Know — request confirmation of whether we process your information and a copy of it;
  • Correct — request correction of inaccurate information;
  • Delete — request deletion of your information;
  • Portability — request a copy in a portable format;
  • Opt out — opt out of the sale or sharing of personal information and of targeted advertising;
  • Non-discrimination — we will not deny service, charge different prices, or provide a different level of service because you exercised a privacy right.

How to exercise these rights. Email us at info@extremetargets.com, or use the account settings in the Services. We will verify your identity, typically by confirming control of the email address associated with your account, before responding. We will respond within the timeframe required by applicable law (generally 45 days, with one permitted extension).

Authorized agents. You may designate an authorized agent to submit a request on your behalf. We may require written proof of authorization and verification of your identity.

Appeals. If we decline your request, you may appeal by replying to our response or emailing info@extremetargets.com with the subject line "Privacy Appeal." We will respond to appeals within the period required by your state's law.

Utah. We are a Utah limited liability company. Under the Utah Consumer Privacy Act, Utah residents have the right to confirm whether we process their personal data and obtain a copy of it, to delete personal data they provided to us, to obtain their data in a portable format, to correct inaccuracies in their personal data, and to opt out of targeted advertising and the sale of personal data. Before we process any sensitive data, we will provide notice and an opportunity to opt out. The Utah Consumer Privacy Act does not create a private right of action and is enforced by the Utah Attorney General. If you are not satisfied with how we have handled your request, you may file a complaint with the Utah Division of Consumer Protection.

California. California residents have the rights described above under the CCPA/CPRA. In the preceding 12 months, we have collected the categories of personal information described in Section 1, for the purposes described in Section 2, and disclosed them to the categories of recipients described in Section 3. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Other states. Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, and Virginia have similar rights under their respective state privacy laws.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit (TLS) and at rest, hashed password storage, row-level access controls on our database, and restricted internal access on a need-to-know basis.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly at info@extremetargets.com if you believe your account has been compromised.

Breach notification. If we determine that a security breach has resulted in the misuse of your personal information, or that misuse is reasonably likely to occur, we will notify you without unreasonable delay, as required by the Utah Protection of Personal Information Act and the breach notification law of your state of residence.

9. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it. If you believe a child has provided us with personal information, contact us at info@extremetargets.com.

10. Mobile Application

The App requests permission to access the following device features. You can grant or revoke each permission at any time in your device settings; revoking a permission will limit the features that depend on it.

  • Camera. Used to capture photos and video within the App. Content you capture is handled as described in Section 1. We access the camera only while you are actively using a feature that requires it, and we do not access it in the background.
  • Bluetooth. Used to discover and connect to compatible accessories and devices you choose to pair with the App. When you connect a device, we may collect the device name, model, identifier, connection status, and the data that device reports to the App. We do not use Bluetooth scanning to determine your physical location, and we do not use Bluetooth data for advertising.
  • Push notifications. Optional. If you enable them, we use a device token provided by Apple or Google to deliver messages to your device. You can disable push notifications at any time in your device settings or in the App's notification settings.

The App is distributed through the Apple App Store and Google Play. Those platforms collect their own data in accordance with their own privacy policies, which we do not control.

11. Third-Party Links and Services

The Services may contain links to third-party websites or services that we do not operate. This Policy does not apply to them, and we are not responsible for their practices. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice in the Services before the changes take effect. The "Last updated" date at the top indicates when this Policy was last revised.

13. Contact Us

If you have questions about this Policy or our privacy practices, contact us at:

Extreme Targets LLC
1717 Blacksmith Court
Logan, UT 84321
info@extremetargets.com
435-557-4010