Privacy Policy
Last updated August 2, 2026
This policy explains what information MSL Performance (“MSL,” “we,” “us”) collects when you use this site, why we collect it, and how it's handled. We keep this as short and honest as we can.
Account information
When you sign in with Google, we receive your name, email address, and profile picture from Google — nothing more. We use this only to identify your account on this site (orders, addresses, wishlist). We don't request access to your Google Drive, contacts, calendar, or any other Google data. You can revoke this access at any time from your Google Account permissions page.
Location data (quarter-mile timer)
The quarter-mile timer uses your device's GPS to measure speed, splits, and distance during a run. This location data is processed entirely on your device and saved to your browser's local storage (IndexedDB) — it is never sent to our servers. If you use the “Challenge a friend” feature, only the resulting times and speeds (not GPS coordinates or your location) are encoded into the link you choose to share. You can delete any saved run at any time from your run history, or clear your browser's site data to remove everything.
Leaderboard accounts
You don't need to sign in to post a run to the leaderboard. If you're not signed in, we identify your account by a one-way cryptographic hash of your IP address — we never store your raw IP address. Each unique identity gets a sequential account number (like #42) that's shown publicly instead of your name. If you sign in with Google, that account is linked to your email instead of your IP, so it follows you across devices; we still only ever display your account number, never your name or email, on the public leaderboard. We store the times, speeds, and splits from runs you choose to post — never GPS coordinates or your location.
Cart, wishlist, and local storage
Your cart and wishlist are stored in your browser's local storage, tied to your device and browser — not our servers. Clearing your browser data will clear these too.
Payments
When checkout is live, payments are processed by Stripe. We never see or store your full card number — Stripe handles that directly. See Stripe's privacy policy for how they handle payment data.
What we don't do
We don't sell your data. We don't share it with advertisers. We don't use it for anything beyond running this site and fulfilling orders.
Deleting your data
To delete your account and any associated order history, email matthew@xstlo.com and we'll remove it.
Children's privacy
This site is not directed at children under 13, and we don't knowingly collect information from them.
Changes
If this policy changes materially, we'll update the date above. Continued use of the site after changes means you accept the updated policy.
Contact
Questions about this policy? Email matthew@xstlo.com.