LAST UPDATED 24 SEPTEMBER 2026

Privacy policy

This explains what we collect when you buy from vialcool.com, why, and how to get it removed.

What we collect

When you order: your name, shipping address, email address and phone number. These are collected by Stripe during checkout and used to process payment and deliver your order.

When you claim the welcome offer: your email address. We use it to apply your discount and to send you emails about VialCool. An earlier version of the offer also asked for a mobile number; if you gave one, we keep it with the consent wording you agreed to and when, and text you only with that consent. Every message tells you how to stop; you can also email us to be removed at any time.

If you start a checkout but don't finish: if you gave us your email, at checkout or for the welcome offer, and leave without paying, we may send up to two reminder emails about that order. Each one has an unsubscribe link, and unsubscribing stops them.

When you browse: aggregate page-view data through Vercel Analytics — pages visited, referring site, country, device type — and product analytics through PostHog, which sets a first-party cookie holding a random identifier so we can see how one visit moves through the site: the pages and images you opened, what you clicked, and whether you started checkout. PostHog may also record a replay of your visit for the same purpose. We do not know who you are from any of this unless you place an order.

Which ad or link brought you here: your browser keeps the campaign tags from the link you arrived on (and the referring site if there were none) for 7 days, and sends them with your order so we know which ad it came from. It is stored on your device only and is not shared with anyone but Stripe as part of the order record.

For advertising: we use the Meta Pixel and Meta's Conversions API to measure whether our Facebook and Instagram ads lead to visits and orders. The pixel sets Meta cookies in your browser and reports the pages you view, when you start checkout and when you complete an order. When you complete an order we also send Meta a hashed (one-way encoded) version of the email, name and shipping city, state and ZIP from your order so it can match the purchase to the ad. Meta may use this under its own privacy policy, including to build audiences for our ads. You can turn this off for your browser with the control below.

We also use the Google Ads tag to measure whether our Google ads lead to visits and orders. It sets Google cookies in your browser and reports when you start checkout and when you complete an order, including the order value and a hashed version of your email so Google can match the purchase to the ad. The same control below turns it off.

Do not share my data for advertising

We do not collect health information. We never ask what medication you store in the cooler, and you should not send it to us.

Card details

We never receive or store your card number. Payment is handled entirely by Stripe, a PCI-certified processor. We only see the last four digits and the result of the transaction.

Who we share it with

Only the parties needed to fulfil your order:

• Stripe — payment processing
• Our fulfilment supplier and the carrier — your name and shipping address, so your order can be delivered
• Vercel — website hosting and aggregate analytics
• PostHog — product analytics, processing site-usage data on our behalf
• Meta — advertising measurement, as described above
• Google — advertising measurement, as described above
• Twilio — sending the verification code to your mobile number
• Resend — sending our emails
• Airtable — where our order and lead records are kept

We do not sell your personal information. Sharing site activity and hashed order details with Meta and Google for advertising may count as “sharing” for cross-context behavioural advertising under California law; the control above is how to opt out, and it applies to this browser.

How long we keep it

Order records are retained for 7 years to meet tax and accounting obligations. Vercel analytics data is aggregate and retained on Vercel's standard schedule. PostHog usage data and any session replays are retained for up to 12 months.

Your rights

Depending on where you live — including under the CCPA/CPRA in California, and comparable laws in Colorado, Virginia, Connecticut and Utah — you may have the right to access, correct, delete, or obtain a copy of your personal information, and to not be discriminated against for exercising those rights.

To make a request, email support@vialcool.com from the address used on your order. We will respond within 45 days. Note that we may need to keep order records required for tax purposes even after a deletion request.

Children

This site is not directed to children under 13 and we do not knowingly collect their information.

Security

The site is served over HTTPS and payment is handled by Stripe. No method of transmission is perfectly secure, but we limit what we collect and who can reach it.

Changes

We will update the date at the top of this page when this policy changes.