Privacy policy
What we collect when you shop, make an account, chat or send us a message, and what we do with it.
Last updated: October 29, 2026
Who we are
AquaFrenzy is run by Epicloot LLC, an Alabama company, and sells saltwater fish, corals and invertebrates at aquafrenzy.com. You can reach us at support@aquafrenzy.com. Questions about this policy go to support@aquafrenzy.com.
When you place an order
Checkout happens on Stripe’s secure payment page. Stripe collects your name, email address, phone number, shipping address and card details. We do not store any of these on our own servers, and we never see your full card number.
Our database keeps only the order itself: the order number, what you bought, the prices, the shipping charge, the order status and Stripe’s reference for the payment. When we open your order to pack it, our order screen reads your name, address and phone number from Stripe. We ask for a phone number so we can call or text you if a carrier delay could affect your animals. Anything you type in the order notes box at checkout is kept by Stripe with your order.
Stripe handles your payment details under its own privacy policy.
If you make an account
An account is optional. It keeps your name, your email address, your password (stored only as a scrambled hash we can’t read back), what is in your cart, any stocking plans you save (tank size and type, the animals you picked and your notes), the tank service visits you book, and which orders and live chats are yours, so you can see them when you sign in. A chat you started on the same browser, with the same email address, before signing in is added to your account.
Your saved delivery address and phone number stay with Stripe, like the details you enter at checkout: we keep them on a Stripe customer record linked to your account, so Stripe’s checkout can fill them in. When you check out signed in, the address you enter is saved there for next time. Our account page shows and changes the address by asking Stripe; we don’t keep a copy.
If you forget your password we email you a reset link, which works for one hour.
You can change your details, or delete your account, on your account page at any time. Deleting it removes your sign-in, saved cart, stocking plans and saved address. Order records, booked service visits and chat conversations are then kept as described below, no longer tied to an account.
When you book a tank service visit
Booking a visit at your home or office needs an account. We ask for your name, email address, phone number and the address of the tank, and you can tell us about your tank and what needs doing. We save these with the visit and email a copy to our staff, so we can confirm it, call you on the way and find you. We also save your IP address, which we use to limit how many visits one connection can book in an hour. The next time you book, the form fills in the details from your last visit.
When you send us a message
The contact form asks for your name, email address, an optional phone number and your message. We save these in our database and email a copy to our staff so we can reply. We also save your IP address, which we use to limit how many messages one connection can send in an hour. Your name and email are also added to your browser’s visitor profile (see Visitor statistics below), so we can see which pages you looked at before writing to us.
When you ask for a back-in-stock email
On a sold-out product page you can leave your email address to hear when it is back. We save the address, the product and when you signed up, send you one email when it is in stock again, and keep the record of that email. Every alert email has a link that deletes your sign-up, and we never use the address for anything else. We count sign-ups per connection for an hour to stop spam, without saving your IP address with the sign-up.
When you use live chat
To start a chat we ask for your name and email address. We save the conversation, the page you started it from and your IP address (used only to stop chat spam). New messages are emailed to our staff. If you leave the site before we answer, our reply is also sent to your email address. As with the contact form, your name and email are added to your browser’s visitor profile.
Visitor statistics
We run our own visitor statistics, on our own server, to see how people find and use the store. No outside analytics or advertising company is involved and nothing is shared with one.
When you visit, we record:
- each page you view, when you viewed it, the page or site that sent you there, and any search words you type into our search box;
- your IP address, browser, device type and operating system, and campaign tags in the link you followed (such as utm_source);
- your approximate location (country, state and city), worked out on our server from your IP address using the DB-IP Lite database, without sending your address anywhere;
- if JavaScript is on: how long each page was on screen, how far you scrolled, which links and buttons you clicked, and when you add something to your cart or open the chat. Nothing you type into a form is recorded this way.
These are tied together by the af_vid cookie (below) into a visitor profile, so we can see your visits over time. If you send a message or start a chat, your name and email are added to that profile. We use all of this only to run and improve the store, never to sell or advertise.
Cookies and browser storage
We use no advertising cookies and no cookies from outside companies.
- af_vid is a random code that links your visits for our visitor statistics. It expires after one year.
- afsess remembers your cart, keeps our forms secure, keeps you signed in to your account and follows your order through checkout. It is deleted when you close your browser.
- af_chat is set only if you start a live chat. It holds a random code that lets your browser find your conversation again, and expires after 30 days.
- Your browser also remembers whether the chat window was open. This is cleared when you close the tab.
- Stripe sets its own cookies on its checkout page.
Fonts and other files
Our fonts, images and scripts are all served from our own server. Browsing our pages doesn’t contact Google or any other outside service.
Server logs
Like most websites, our web server records each visit: your IP address, the date and time, the page requested, the page you came from and your browser type. Errors are written to a separate log, which can include the same details. We use these logs only to keep the site running and secure, and they are deleted after 14 days.
We send email from support@aquafrenzy.com: replies to your messages and chats, password reset links you ask for, and back-in-stock alerts you sign up for. When you pay, Stripe emails you a receipt. We don’t send newsletters or marketing email.
How long we keep it
- Back-in-stock sign-ups are kept until you use the link in the email, or until we delete the product.
- Contact messages and chat conversations are kept for 5 years, then deleted automatically. A chat counts from its last message.
- Order records (what you bought, the amounts paid and our Stripe payment reference) are kept for 7 years for our accounting and tax records.
- Booked service visits (the service, time, address, phone number and your notes) are kept for 7 years for our accounting and tax records.
- Your account, with its saved cart, stocking plans and the address Stripe keeps for it, is kept until you delete it.
- Pages viewed and clicks are deleted after 400 days. Your visitor profile is deleted once your browser hasn’t visited for 400 days, or for 5 years if you gave us your name and email in a message or chat.
- Page views from search engines and other bots are deleted after 30 days.
- Server logs are deleted after 14 days.
Who we share it with
We never sell or rent your information. We share it only with:
- Stripe, to take your payment and, if you have an account, to keep your saved delivery address.
- UPS, which gets your name, address and phone number on the shipping label.
- Anyone the law requires us to share it with.
Your choices
You can ask us to show you, correct or delete the information we hold about you: email support@aquafrenzy.com. We may need to keep order records for tax and accounting. You can delete our cookies at any time in your browser settings; deleting af_vid starts a new, unconnected visitor profile.
Children
Our site is not meant for children under 13, and we don’t knowingly collect their information.
Changes
If we change this policy we will update this page and the date at the top.