Privacy Policy

Last updated: July 1, 2026. Stuff Pretty Good (operated by MehyarSoft LLC, a New York limited liability company) respects your privacy. This Privacy Policy explains in plain English what personal information we collect, why we collect it, how we use it, who we share it with, how long we keep it, what rights you have, and how to contact us. If anything in this policy is unclear, please email hello@mehyar.us and we will answer.

1. Who we are

Stuff Pretty Good is a brand owned and operated by MehyarSoft LLC, a privately held limited liability company organized under the laws of the State of New York, United States. MehyarSoft LLC holds a US Employer Identification Number (EIN) issued by the Internal Revenue Service. References in this policy to "we," "us," or "our" mean MehyarSoft LLC. You can contact us at hello@mehyar.us, by phone at +1 (555) 555-0100, or by mail at the address available on request to hello@mehyar.us.

2. Scope of this policy

This policy applies to the website located at stuffprettygood.com and any subdomains we operate (for example, www.stuffprettygood.com), the Stuff Pretty Good signup, unsubscribe, and preferences pages, and any email or SMS messages we send to subscribers. It does not apply to third-party websites we link to — once you click an outbound link to a merchant, partner, or social platform, that destination's privacy practices apply. We encourage you to read those policies before submitting personal information. This policy also does not apply to background processing performed by affiliate networks on their own systems after a click is attributed to us; those networks have their own privacy notices.

3. The short version (a one-paragraph summary)

MehyarSoft LLC collects the information you choose to give us (email, optionally your name and ZIP, and a US mobile phone number only if you opt in to SMS), plus basic device and usage information when you visit the site (IP, browser type, pages viewed, link clicks). We use that information to operate the site, send you the messages you signed up for, attribute affiliate commissions to the merchants who fund the site, debug problems, and meet legal recordkeeping obligations. We do not sell personal information. We do not deliver third-party behavioral advertising. We share information only with service providers who act on our instructions, with affiliate networks to attribute clicks, and with authorities when the law requires it. You can access, correct, delete, port, or restrict your information, and you can withdraw any consent at any time.

4. Information we collect

We collect personal information only when we have a lawful basis and a clear purpose. The categories below describe what we collect, where it comes from, and why.

4.1 Information you give us

• Account and signup data. When you sign up for our email list or SMS list, we collect your first name, last name, email address, ZIP / postal code, and mobile phone number (only if you provide one). Email is required to join the email list. Phone is collected only when you opt in to SMS messaging by typing a US mobile number and explicitly ticking the SMS consent box. We never require a phone number as a condition of any purchase, signup, or other benefit.
• Preferences. When you use the Preferences page or interact with the AI tools, we store your interest categories (gifts, home, tech, travel, pets, kitchen, deals under $50, and similar) so future messages stay relevant.
• Prompts you submit to AI tools. When you use the Gift Finder, Starter Kit Builder, or similar AI-assisted features, we collect the free-text prompts you submit and the responses we generate. We use these to operate the feature, improve ranking quality, and debug issues. Do not include sensitive personal information (such as Social Security numbers, financial account numbers, or health information) in prompts.
• Messages you send us. If you email us, fill out a form, message us through a partner platform, or reply to one of our emails or SMS messages, we keep a record of the communication so we can respond, follow up, and improve.
• Survey responses and feedback. If you respond to a survey or send feedback, we collect what you choose to share.

4.2 Information collected automatically

• Device and connection data. IP address, approximate geolocation derived from IP, browser type and version, operating system, device type, screen size, referrer URL, and the pages of our site you viewed.
• Usage data. Time on page, scroll depth, clicks, outbound link clicks (including affiliate link clicks, which carry our tracking identifier), in-site search queries, and product interactions (such as which picks you expand or save).
• Cookies and similar technologies. We use first-party cookies, local storage, and session storage for session state, preferences, and analytics. See Section 6 for categories and control options.
• Server logs. Standard web server logs including timestamp, IP, request path, status code, and user agent, retained for security and debugging.

4.3 Information from partners and service providers

• Affiliate networks. Amazon Associates, Walmart Impact, FlexOffers, Stay22, and other networks may share aggregated, anonymized, or attributed reporting (for example, "a click from our site resulted in a purchase within the cookie window"). Some reports include identifiers — for example, the date and time of a click, the product viewed, the order ID, or a hashed email — that we treat as personal information under applicable law. They use this information to compute and pay our commissions and to detect fraud.
• Email and SMS delivery providers. Our email and SMS providers give us delivery, open, click, and bounce information so we can keep our lists clean and honor opt-outs.
• Analytics providers. We use Microsoft Clarity for session replay and heatmapping; Clarity may record anonymized interactions to help us understand how the site is used.
• Social and platform providers. If you interact with us through social media (for example, by tagging us or DMing us), we may receive profile information consistent with your privacy settings on that platform.

5. How we use personal information

We use personal information to:

• Operate, secure, and improve the site and our services.
• Send the email and SMS messages you signed up for, including useful finds, gift ideas, preference updates, and transactional notices.
• Process unsubscribe, preference, and account requests.
• Attribute affiliate clicks to merchant networks so we can be paid the commissions that fund the site.
• Measure content performance, debug issues, and understand which categories and picks are most useful.
• Detect, prevent, and address fraud, abuse, security incidents, and violations of our terms.
• Comply with applicable laws, regulations, and lawful government requests.
• Enforce our Terms of Service and protect our rights, your safety, and the safety of others.

We do not sell personal information. We do not use your phone number or email to deliver third-party advertising to you. We do not run cross-context behavioral advertising on this site.

6. Cookies, analytics, and session replay

We use the following categories of cookies and similar technologies. We try to limit non-essential cookies to those that materially help us run the site.

• Strictly necessary. Session, security, and preference cookies required for the site to function. These are set by default and do not require consent under most privacy laws.
• Analytics. Aggregated traffic and behavior analytics. We use Microsoft Clarity (clarity.ms) to understand how visitors move through the site via session replay and heatmaps. Clarity may set its own cookies; you can opt out at clarity.microsoft.com/privacy.
• Affiliate. Cookies or URL parameters set by affiliate networks (for example, Amazon's tag=... parameter) to attribute clicks and qualifying purchases. These are necessary to operate the site's approved-offer business model and we have no practical alternative if you want to use outbound links.
• Verification. Site-verification meta tags from Impact, Amazon, and similar partners to confirm our partnership status. These do not set cookies.

You can clear or block cookies in your browser settings. Blocking strictly necessary cookies may break parts of the site (for example, you may not be able to stay signed in or save preferences). You can also use the Global Privacy Control signal where required by applicable law (see Section 14).

7. Email and SMS communications

7.1 Email

When you sign up for the email list, we collect your email and use it to send you the messages you opted into. Every marketing email contains an unsubscribe link and our physical mailing address. You can also unsubscribe at /unsubscribe or change what you receive at /preferences. We honor opt-out requests promptly, typically within ten business days and usually within one business day. Transactional messages (account notices, security alerts, confirmations, double opt-in confirmations) may be sent regardless of marketing opt-out status where required to deliver a service you requested.

7.2 SMS / text messages

SMS is opt-in only. We will not text the mobile number you provide unless you explicitly tick the SMS consent box on the signup form. By submitting the form with the box ticked, you agree that MehyarSoft LLC (operator of Stuff Pretty Good) may send you recurring automated marketing and informational text messages at that number.

Key terms of our SMS program:

• Program operator. MehyarSoft LLC (operator of Stuff Pretty Good), a New York limited liability company, EIN on file.
• What you consent to. Recurring automated marketing and informational text messages from Stuff Pretty Good at the mobile number you provided.
• Frequency. Message frequency varies; typically up to 4 messages per month. The exact frequency depends on your selected preferences and seasonal campaigns.
• Rates. Message and data rates may apply. Carriers (e.g., AT&T, T-Mobile, Verizon, and their MVNOs) are not liable for delayed or undelivered messages.
• Not a condition of any purchase. Consent is not a condition of any purchase, and SMS signup is not a condition of receiving any other benefit from Stuff Pretty Good.
• Account holder. By providing your mobile number, you confirm that you are the account holder for that number or that you have the account holder's permission to receive messages at it.
• Opt out. Reply STOP to any message to unsubscribe. We honor opt-out requests within 10 business days and usually much faster.
• Help. Reply HELP for help, or contact hello@mehyar.us.
• Records. We log the date, time, source URL, and version of the SMS consent you provided, the IP address you submitted from, the user agent, and the consent text shown at the time. We retain these records for at least four years from the date of consent to comply with TCPA, A2P 10DLC, CTIA, and applicable state law.
• Registration. Our SMS program is registered with The Campaign Registry (TCR) and operates on A2P 10DLC long codes registered to MehyarSoft LLC.

State-specific SMS notice. Residents of Florida, Washington, Oklahoma, Maryland, and other states with their own mini-TCPA or telephone-solicitation laws receive the protections of those laws in addition to the TCPA protections above. Where a state law requires additional or earlier consent, that additional consent is collected before any SMS is sent.

8. How we share personal information

We do not sell personal information. We share personal information only with:

• Service providers who process data on our behalf — for example, hosting (Cloudflare Pages, Cloudflare Workers), email delivery, SMS delivery, analytics, error monitoring, and database providers. Each provider is bound by confidentiality and data-processing terms consistent with this policy, and only receives the information needed to perform its service.
• Affiliate and partner networks (Amazon Associates, Walmart Impact, FlexOffers, Stay22, and similar) so they can attribute clicks and qualifying purchases to our account and pay the resulting commissions to MehyarSoft LLC. These networks may set their own cookies or use URL parameters when you follow an outbound link, and their privacy practices apply once you have clicked through.
• Legal and regulatory authorities when we believe in good faith that disclosure is necessary to comply with a law, valid subpoena, court order, or government request, or to protect our rights, your safety, or the safety of others.
• A successor entity in the event of a merger, acquisition, reorganization, or sale of assets, in which case we will notify affected users as required by law (typically by email and a banner on the site) and the receiving entity will be required to honor this policy or give you a chance to opt out.
• Aggregated or de-identified information that cannot reasonably be used to identify you, which we may share without restriction (for example, "our readers clicked on gift picks 23% more often than home picks in Q4").

We do not sell personal information for money or other value, and we do not share personal information with third parties for their own cross-context behavioral advertising purposes.

9. Data retention

We keep personal information only as long as we have a lawful basis to do so. In practice:

• Account and signup records: until you unsubscribe or delete your account, plus a reasonable wind-down period (typically up to 90 days), after which records are deleted or fully anonymized.
• SMS consent records: for at least four years from the date of consent, in line with TCPA, A2P 10DLC, CTIA, and applicable state law.
• Email consent and suppression records: indefinitely, to ensure we do not email a previously opted-out address.
• Server logs and analytics: typically 13–26 months, then aggregated or deleted.
• Tax and accounting records: as required by law (typically seven years in the US for federal tax purposes, longer in some states).
• Backups: encrypted backups are retained on a rolling basis for disaster-recovery purposes and are deleted on the same schedule as the underlying records.

10. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete personal information, subject to our legal recordkeeping obligations (we cannot delete SMS consent records within the four-year retention window, and we cannot delete suppression records used to honor your opt-outs).
• Object to or restrict certain processing.
• Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
• Receive a portable copy of your information.
• Opt out of "sale" or "sharing" for cross-context behavioral advertising (we do not sell personal information; we do not currently run cross-context behavioral ads).
• Non-discrimination for exercising any of the rights above.

How to exercise these rights. Email hello@mehyar.us with the right you want to exercise. For your protection, we may need to verify your identity before fulfilling the request. We respond within the timeframes required by applicable law (typically 30–45 days; up to 90 days where complexity warrants, with notice). If we deny your request, we tell you why and how to appeal.

Authorized agents. If you submit a request through an authorized agent, we may require proof of the agent's authority and may still verify your identity directly.

11. California-specific rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"):

• Right to know what categories of personal information we collect, the sources, the business purposes, and the categories of recipients.
• Right to delete personal information we collected from you, subject to the exceptions in Section 10.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell or share personal information as those terms are defined under CCPA/CPRA.
• Right to limit use of sensitive personal information — we do not collect sensitive personal information as defined under CCPA/CPRA.
• Right to non-discrimination for exercising CCPA/CPRA rights.

To exercise these rights, follow the process in Section 10. You may also submit a "Do Not Sell or Share My Personal Information" request at any time by emailing hello@mehyar.us; while we do not sell or share, we will confirm that in writing. California "shining a light" requests can be sent to the same address.

12. Other US state privacy rights

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, and other US states with comprehensive privacy laws have rights similar to those in Section 10. To exercise those rights, follow the process in Section 10. We honor Global Privacy Control signals as required.

13. International transfers

We are a US-based company. If you visit the site from outside the United States, your information will be transferred to and processed in the United States. By using the site, you understand that US data protection laws may differ from those of your jurisdiction. Where required by law, including for transfers from the EEA, the UK, or Switzerland, we rely on Standard Contractual Clauses (the EU Commission Decision 2021/914 modules) or other approved transfer mechanisms to protect your information.

14. Children's privacy

Stuff Pretty Good is intended for a general adult audience and is not directed at children. We do not knowingly collect personal information from children under 13 (COPPA), under 16 where the GDPR's higher age applies, or under any higher age where local law requires. If you believe a child has provided us with personal information, contact hello@mehyar.us and we will delete it. The Service is not directed at children, and parents who believe their child has interacted with the Service should contact us.

15. Security

We use reasonable technical and organizational safeguards designed to protect personal information, including: HTTPS/TLS in transit, encryption at rest where supported by our providers, access controls with least-privilege permissions, audit logging of access to administrative functions, separation of environments, and periodic review of vendor security posture. No system is 100% secure; we cannot guarantee absolute security. If a breach affects you, we will notify you and the relevant authorities as required by applicable law.

16. Third-party links and widgets

Outbound merchant links, Amazon Native Shopping Ads, Walmart catalog embeds, embedded reviews, and similar widgets are governed by the privacy practices of the third parties operating them. We do not control and are not responsible for their practices. Once you click an outbound link, the privacy policy of the destination merchant or partner applies. We encourage you to read those policies before submitting personal information.

17. "Do Not Track" and Global Privacy Controls

We honor Global Privacy Control (GPC) signals where required by applicable law (for example, California, Colorado, Connecticut, Virginia, Utah). If your browser sends a GPC signal, we treat it as a valid opt-out of "sale" or "sharing." We do not currently respond to legacy Do Not Track (DNT) browser signals, which are not regulated.

18. AI features and how they handle inputs

Stuff Pretty Good uses AI to summarize and rank products in our approved catalog. AI features operate against a curated product catalog; they do not invent products. Prompts you submit to AI features are:

• Sent to our AI service provider under a data-processing agreement that prohibits secondary use for model training.
• Retained only as long as necessary to operate the feature and improve ranking quality, subject to our retention schedule.
• Not used by us or our providers to train foundation models on your input.

Do not include sensitive personal information (Social Security numbers, financial account numbers, health information, passwords, or similar) in prompts.

19. Changes to this policy

We may update this policy from time to time. When we do, we revise the "Last updated" date above. For material changes, we will provide additional notice (for example, a banner on the site or an email to active subscribers at least 30 days before the change takes effect, where required by law). Continued use of the site after the effective date of a change constitutes acceptance of the updated policy, except where a law requires affirmative consent. You can always find the current version at this URL, and prior versions are available on request to hello@mehyar.us.

20. Contact us

Privacy questions, access requests, complaints, and authorized-agent requests:

Email: hello@mehyar.us
Phone: +1 (555) 555-0100
Mailing address: available on request to hello@mehyar.us.

Designated privacy contact. For state-specific requests or authorized-agent submissions, address your email to "Privacy" in the subject line so it is routed correctly.

Complaint escalation. If we cannot resolve your complaint, you may have the right to lodge a complaint with your local data protection authority (for example, the California Attorney General, the relevant US state attorney general, or the supervisory authority in your EEA Member State). We would, however, appreciate the chance to address your concerns directly before you approach a regulator.