Privacy policy

Last updated September 28, 2026

MyCampusMerch (mycampusmerch.com) is run by CMV Holdings LLC in Athens, Georgia (“we”, “us”). This page explains what we collect when you shop with us, why we collect it and who else sees it. We don't sell your personal information for money. We do share some of it with Meta to measure our ads, which some state laws count as a sale or as sharing for targeted ads. You can turn that off; see Your privacy choices. We also use Google Analytics to see how people find and use the site.

What we collect

• Order details. Your name, email, phone number, shipping address, the sorority house for drop-off orders, what you bought and what you paid.
• Account details. If you create an account, your name, email, phone number and password. We never see the password itself, only a secure hash of it.
• Launch list. If you join the list before we open, your email and, if you pick one, your sorority house. We use it only to send the email that tells you the shop is open. That email has an unsubscribe link, or email us to come off the list.
• Custom artwork. Image files you upload for custom buttons, and any notes you add to them.
• Messages. What you send us through the wholesale or contact forms, or by email.
• Payment. PayPal takes your payment. We get the PayPal order number and the payment status, but never your card or bank details.
• Device and usage data. Your IP address, browser type and the pages you visit. These come from our server logs and the Meta Pixel and Google Analytics described below. We also note how you found us (the campaign link, ad or website that sent you, the chapter code in the link if it had one, and the page you landed on) and keep it with your order.

How we use it

• To take payment, press your order, ship it or drop it off, and send order and tracking emails.
• To answer your questions and deal with problems with an order.
• To run your account and show your order history.
• To pay royalties and file reports with the organizations that license their designs to us.
• To measure our Instagram and Facebook ads (see below).
• To see which pages people visit and where checkout loses them (see Google Analytics below).
• To prevent fraud and abuse, keep records required by law and collect sales tax.

Meta Pixel and Conversions API

We use the Meta Pixel and Meta's Conversions API to measure our Instagram and Facebook ads. The Pixel is code from Meta that runs in your browser and sets cookies (_fbp, and _fbc if you came from an ad). It tells Meta which pages you view, which products you look at, when you add to your cart, start checkout, join the launch list or buy. It doesn't run on the sign-in, account or admin pages. When you buy, our server also sends Meta the order total and what you bought, your IP address and browser, and your email, phone number, name, city, state and ZIP code. We save the _fbp and _fbc values with your order, so this still works when a payment clears days later. Those contact details are hashed (turned into a code) before they leave us. Hashing isn't anonymous. Meta hashes the details on its own accounts the same way, so it can match the purchase to you. Meta may use this to show you ads and to improve its ad systems, under the Meta Privacy Policy. You can limit ad personalization in your Meta ad preferences, or block third-party cookies in your browser.

We send all of this to Meta with Limited Data Use turned on. Meta works out which state you're in, and where a state privacy law covers it, Meta limits what it does with the data as that law requires. If you left the email field blank at checkout, we use your PayPal email only for order emails and never send it to Meta.

Google Analytics

We use Google Analytics to measure how the site is used. It runs in your browser and sets cookies (_ga and _ga_ followed by our site's id). It tells Google which pages you view, your device and browser, your rough location (worked out from your IP address, which Google Analytics doesn't store), how you arrived, and when you add to your cart, start checkout or buy, with the order number, the total and the products. It never gets your name, email, phone or address, and it doesn't record page views on the sign-in, account or admin pages. We keep this data for 14 months. We use it only to improve the site: Google signals and ad personalization are off, and we don't link it to any ad account. You can block it with Google's opt-out add-on, and it never loads when your browser sends Global Privacy Control. See the Google Privacy Policy.

Your privacy choices

You can opt out of us sharing your information with Meta. The simplest way is Global Privacy Control (GPC), a setting that tells every site you visit not to sell or share your data. It's built into Firefox, Brave and DuckDuckGo, and you can add it to other browsers with an extension. When your browser sends it:

• The Meta Pixel doesn't load, so none of the page views, cart or checkout steps above reach Meta.
• Google Analytics doesn't load either, so none of that reaches Google.
• We note it on any order you place and send Meta nothing about that purchase, not when you pay, not when an eCheck clears later, and not when we settle the order by hand. We don't keep the Meta cookie values with that order either.

GPC works per browser, so turn it on everywhere you shop with us. If you can't use it, email orders@mycampusmerch.com and we'll stop sending Meta your purchases.

Cookies

Besides the Meta and Google Analytics cookies above, we set cookies that keep you signed in and remember your session. These are needed for the site to work. When you arrive from a campaign link, an ad or another website, we also set mcm_src, which records where you came from, any chapter code in the link and the page you landed on for 90 days, so we can tell which posts, ads and chapters lead to orders. We don't use cookies to show you other companies' ads.

Your cart is saved in your own browser (local storage), so it's still there when you come back. While you check out, the name, address, email and phone number you type are also kept in that browser tab (session storage), so a reload or a trip to sign in doesn't wipe the form. They're cleared once your payment goes through or you close the tab. None of this reaches us until you place the order.

Who we share it with

We share your information only with companies that help us run the shop, and only what each one needs to do its job:

• Payment processors take your payment.
• Hosting and database providers store your account, orders and uploaded artwork.
• Email providers send our order and account emails.
• Shipping services and carriers get your city, state and ZIP to quote rates, and your name and address to deliver your package.
• Advertising partners measure our ads, as described above.
• Analytics providers measure how the site is used, as described above.
• Licensing organizations get sales totals for licensed designs, which they may audit.

We may also share information if the law requires it, to protect our rights or someone's safety, or as part of selling or transferring the business.

How long we keep it

We keep order totals, tax and the city, state and ZIP of each order for seven years, because tax and licensing rules require it. We keep your name, address, email and phone on an order for two years, then remove them, along with how you found us and the Meta cookie values. Unpaid checkouts are deleted after 30 days. Custom artwork on an order is kept for two years so we can press a reorder, and uploads that never became an order are deleted after 30 days. Messages from the wholesale and contact forms are deleted after two years, unless we went on to work together. The launch list is deleted 30 days after the launch email goes out. Account details stay until you ask us to delete them. Our backups roll over every 14 days, so deleted data can take up to two weeks to leave them.

Your choices and rights

You can ask to see, correct or delete the personal information we hold about you, or ask for a copy of it. Email orders@mycampusmerch.com from the address you used with us. We'll answer within 30 days. We may keep order records that we're legally required to hold. We don't send marketing emails without your permission. Order emails go to the address you gave us, or to your PayPal email if you left it blank.

Security

Every page is served over HTTPS, and browsers are told never to load the site any other way. Your orders sit in our database, where a signed-in customer can read only their own orders and only our admin accounts can read them all. Guest orders are read only by our own server. The providers listed above that host or process your data can reach it too. No system is perfectly secure, but if a breach affects your information, we'll tell you as the law requires.

Children

MyCampusMerch is for college students and adults. We don't knowingly collect information from children under 13. If you think a child has given us information, email us and we'll delete it.

Changes and contact

If we change this policy, we'll update the date at the top of this page. For any privacy question, email orders@mycampusmerch.com.