Privacy Policy
We collect information about you in a few ways:
Personal Data: Information you give us, such as your name, email address, shipping address, and telephone number, for example when you create an account, place an order, sign up for our newsletter, enter a giveaway, leave a review, file a warranty claim, or contact us through the contact form or support chat.
Derivative Data: Information our servers automatically collect when you access the site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the site.
Financial Data: Payment details you enter at checkout, such as your card number and expiration date, go directly to our payment processor, Stripe. We never see or store your full card number.
Analytics Data: We measure how the site is used with M2 Metrics, our own analytics service. It records the pages you view, the links and buttons you click, the items you add to your cart, the site you came from, your screen width, and whether you are browsing inside the Facebook or Instagram app. We do not use Google Analytics, and we do not place advertising trackers on the site.
Personal Data: Information you give us, such as your name, email address, shipping address, and telephone number, for example when you create an account, place an order, sign up for our newsletter, enter a giveaway, leave a review, file a warranty claim, or contact us through the contact form or support chat.
Derivative Data: Information our servers automatically collect when you access the site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the site.
Financial Data: Payment details you enter at checkout, such as your card number and expiration date, go directly to our payment processor, Stripe. We never see or store your full card number.
Analytics Data: We measure how the site is used with M2 Metrics, our own analytics service. It records the pages you view, the links and buttons you click, the items you add to your cart, the site you came from, your screen width, and whether you are browsing inside the Facebook or Instagram app. We do not use Google Analytics, and we do not place advertising trackers on the site.
We use cookies and similar browser storage for the following purposes:
Essential: These keep the site working and are always on:
Analytics and Referrals: These come from M2 Metrics, our own analytics service:
Embedded Content: Some product, news, and artist pages show YouTube videos or Instagram posts. When one loads, YouTube (Google) or Instagram (Meta) may set its own cookies under its own privacy policy.
Your Choices: You can block or delete cookies and site data for m2-labs.com in your browser settings at any time. Blocking essential cookies may stop sign-in or your cart from working. Blocking the M2 Metrics script from m2l.ink stops analytics without affecting the rest of the site.
Essential: These keep the site working and are always on:
- Keeping you signed in to your account
- Keeping your cart when you are not signed in
- Remembering your language (up to 1 year)
- Remembering which reviews you marked as helpful (up to 1 year)
- Remembering your size choices for free items, recently loaded product lists, and whether you have already signed up for our newsletter
- Protecting the contact form from spam with Cloudflare Turnstile
Analytics and Referrals: These come from M2 Metrics, our own analytics service:
- A random visit ID in your browser's session storage, cleared when you close the tab
- If you arrive through a link from one of our partners, a click ID saved in a cookie that lasts 90 days and in your browser's storage, so a purchase you make can be credited to the partner who referred you
- The first time you open our home page or a giveaway page, a record of where you came from (campaign tags, Facebook or Google ad-click IDs, the referring site, and the first page you saw), saved in your browser's storage so we can see where newsletter signups and giveaway entries come from
Embedded Content: Some product, news, and artist pages show YouTube videos or Instagram posts. When one loads, YouTube (Google) or Instagram (Meta) may set its own cookies under its own privacy policy.
Your Choices: You can block or delete cookies and site data for m2-labs.com in your browser settings at any time. Blocking essential cookies may stop sign-in or your cart from working. Blocking the M2 Metrics script from m2l.ink stops analytics without affecting the rest of the site.
We may use information collected about you via the site to:
- Create and manage your account
- Process your transactions and send you related information, including purchase confirmations and invoices
- Send you marketing communications, respond to your comments and questions, and provide customer service
- Improve the site and customize your user experience
- Monitor and analyze trends, usage, and activities in connection with our services
- Measure how the site is used with M2 Metrics, our own analytics service
- Credit sales to the partners who referred them
- Ensure website security and prevent fraud
We do not sell your personal information or share it for targeted advertising. We share it only in the following situations:
Service Providers: Companies that run parts of our service for us, and only for that purpose:
Referral Partners: When you place an order, M2 Metrics records the order number, the order total, and your account ID or email address. If you arrived through a partner's link, that partner is credited with the sale.
By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
With Your Consent: We may disclose your personal information for any other purpose with your consent.
Service Providers: Companies that run parts of our service for us, and only for that purpose:
- Stripe: Processes payments
- Cloudflare: Hosts the site, its database, and its images, and protects the contact form from spam
- Render: Hosts M2 Metrics, our analytics service
- Resend: Sends our emails, such as order confirmations and account emails
- ShipEngine and our shipping carrier: Receive your name, shipping address, and telephone number to quote shipping and deliver your order
Referral Partners: When you place an order, M2 Metrics records the order number, the order total, and your account ID or email address. If you arrived through a partner's link, that partner is credited with the sale.
By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
With Your Consent: We may disclose your personal information for any other purpose with your consent.
Your information may be transferred to and processed in countries other than your country of residence, including the United States:
Where It Is Processed: M2 Labs is based in the United States, as are the service providers listed above, so your information is processed in the United States. Cloudflare may also process it in the data center closest to you.
Data Protection: We ensure that any international transfers of your personal data are protected by appropriate safeguards, including:
Where It Is Processed: M2 Labs is based in the United States, as are the service providers listed above, so your information is processed in the United States. Cloudflare may also process it in the data center closest to you.
Data Protection: We ensure that any international transfers of your personal data are protected by appropriate safeguards, including:
- Adequacy decisions from relevant data protection authorities
- Standard contractual clauses approved by data protection authorities
- Certification schemes like the EU-U.S. Data Privacy Framework
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law:
Account Information: Retained for as long as your account is active or as needed to provide services.
Transaction Data: Retained for up to 7 years for tax and accounting purposes.
Analytics Data: Kept in M2 Metrics for as long as needed to understand how the site is used and to credit partners for the sales they referred. In your browser, the visit ID is cleared when you close the tab, the partner cookie expires after 90 days, and the copy in your browser's storage and the record of where you first came from stay until you clear your site data.
Marketing Communications: Retained until you unsubscribe or request deletion.
Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes such as fraud prevention.
Account Information: Retained for as long as your account is active or as needed to provide services.
Transaction Data: Retained for up to 7 years for tax and accounting purposes.
Analytics Data: Kept in M2 Metrics for as long as needed to understand how the site is used and to credit partners for the sales they referred. In your browser, the visit ID is cleared when you close the tab, the partner cookie expires after 90 days, and the copy in your browser's storage and the record of where you first came from stay until you clear your site data.
Marketing Communications: Retained until you unsubscribe or request deletion.
Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes such as fraud prevention.
Depending on your location, you may have the following rights regarding your personal information:
Access: Request a copy of the personal information we hold about you.
Correction: Request that we correct or update inaccurate personal information.
Deletion: Request that we delete your personal information, subject to certain exceptions.
Portability: Request a copy of your personal information in a machine-readable format.
Objection: Object to our processing of your personal information for certain purposes.
Restriction: Request that we restrict our processing of your personal information.
Cookies and Tracking: Block or delete cookies and site data for m2-labs.com in your browser at any time, or ask us to delete analytics data linked to your account or email address.
To exercise these rights, please contact us at info@m2-labs.com
Access: Request a copy of the personal information we hold about you.
Correction: Request that we correct or update inaccurate personal information.
Deletion: Request that we delete your personal information, subject to certain exceptions.
Portability: Request a copy of your personal information in a machine-readable format.
Objection: Object to our processing of your personal information for certain purposes.
Restriction: Request that we restrict our processing of your personal information.
Cookies and Tracking: Block or delete cookies and site data for m2-labs.com in your browser at any time, or ask us to delete analytics data linked to your account or email address.
To exercise these rights, please contact us at info@m2-labs.com
We use administrative, technical, and physical security measures to help protect your personal information:
Technical Safeguards: We use encryption, secure servers, and other technical measures to protect your data during transmission and storage.
Access Controls: We limit access to your personal information to employees and service providers who need it to perform their duties.
Regular Updates: We regularly update our security practices and systems to protect against new threats.
Third-Party Security: Our service providers, including Stripe and Cloudflare, are required to maintain appropriate security measures for your data.
Limitations: While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
Technical Safeguards: We use encryption, secure servers, and other technical measures to protect your data during transmission and storage.
Access Controls: We limit access to your personal information to employees and service providers who need it to perform their duties.
Regular Updates: We regularly update our security practices and systems to protect against new threats.
Third-Party Security: Our service providers, including Stripe and Cloudflare, are required to maintain appropriate security measures for your data.
Limitations: While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
We do not knowingly solicit information from or market to children under the age of 13:
Age Restriction: Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Parental Rights: If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.
Parental Notice: If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so we can take appropriate action.
Age Restriction: Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Parental Rights: If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.
Parental Notice: If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so we can take appropriate action.
We may update this Privacy Policy from time to time:
Notification: When we make changes, we will update the effective date at the top of this policy and notify users through our website or by email for material changes.
Review: We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Continued Use: Your continued use of our website after any changes to this Privacy Policy will constitute your acceptance of such changes.
Notification: When we make changes, we will update the effective date at the top of this policy and notify users through our website or by email for material changes.
Review: We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Continued Use: Your continued use of our website after any changes to this Privacy Policy will constitute your acceptance of such changes.
If you have questions or comments about this Privacy Policy, please contact us at:
M2-Labs LLC
Email: info@m2-labs.com
Website: m2-labs.com
Data Protection Officer: For privacy-related inquiries, you may also contact our Data Protection Officer at privacy@m2-labs.com
Effective Date: October 27, 2026
M2-Labs LLC
Email: info@m2-labs.com
Website: m2-labs.com
Data Protection Officer: For privacy-related inquiries, you may also contact our Data Protection Officer at privacy@m2-labs.com
Effective Date: October 27, 2026