Privacy Policy

Cloud Water Filters  |  Last Updated: July 28, 2026

This Privacy Policy describes how Cloud Water Filter, LLC, a Delaware limited liability company with its principal place of business at 4555 30th St., Unit 101, San Diego, CA 92116 (“Cloud Water Filters,” “we,” “us,” or “our”), collects, uses, discloses, and protects your personal information when you visit or make a purchase from www.cloudwaterfilters.com (the “Site”), use our smart-home water filtration devices and companion mobile applications, or otherwise interact with us (collectively, the “Services”).

By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services.

1. Information We Collect

Information You Provide to Us

We collect personal information that you voluntarily provide when you make a purchase, create an account, sign up for emails or text messages, request support, complete a water quality lookup, or otherwise communicate with us. This may include:

  • Name, email address, phone number, and shipping and billing address
  • Account credentials and order history, including products purchased and subscription or reorder details
  • Payment information, which is collected and processed directly by our payment processors and is not stored by us
  • Communications you send us, including support requests, reviews, and survey responses
  • If you choose to pay using HSA or FSA funds through our partner TrueMed, information necessary to determine eligibility, which may include limited health-related information processed directly by TrueMed

Connected Device and App Telemetry

When you install and use our smart-home water filtration units and companion applications, we collect telemetry and operational data to ensure proper functionality and provide Services. This includes:

  • Water consumption metrics and filter degradation alerts
  • Device IP and MAC addresses
  • Wi-Fi network credentials, used locally during setup and not retained by us
  • Diagnostic and usage information routed through our companion mobile application

Information Collected Automatically

When you visit the Site, we and our service providers automatically collect certain information about your device and activity, including IP address, browser type and version, device identifiers, operating system, referring URLs, pages viewed, time and date of visits, time spent on pages, approximate geographic location derived from IP address, and other usage and diagnostic data. This information is collected through cookies, pixels, tags, scripts, web beacons, and similar technologies described below.

Information from Third Parties

We may receive information about you from third parties, including advertising and analytics partners, affiliate networks, and identity resolution providers. As described in the Identity Resolution section below, our online data partners or vendors may associate your activity on our Site with other personal information they or others have about you, including your email or home address.

2. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (pixels, tags, scripts, web beacons, and SDKs) to operate the Site, remember your preferences, analyze traffic, measure advertising performance, and deliver advertising tailored to your interests. Cookies may be “session” cookies, which expire when you close your browser, or “persistent” cookies, which remain on your device until deleted or expired.

The categories of technologies we use include:

  • Strictly necessary: required to operate the Site, process orders, and maintain security.
  • Functional: remember your choices and preferences, and enable features such as interactive video and customer support chat.
  • Analytics and performance: help us understand how visitors use the Site and measure marketing attribution.
  • Advertising and targeting: used by us and our advertising partners to deliver ads relevant to your interests on this Site and on third-party sites and apps, and to measure their effectiveness.

You can control cookies through your browser settings and through the opt-out mechanisms described in this Policy. Blocking certain cookies may affect your ability to use parts of the Site.

3. Identity Resolution and Email-Based Retargeting

We work with identity resolution and retargeting partners, including Retention.com, to help us recognize visitors to our Site and reach them with relevant marketing.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. We do not utilize these identity resolution services for users we know to be under 16 years of age.

This activity may constitute a “sale” or “sharing” of personal information under certain state privacy laws. You may opt out as described in the Your Privacy Rights and Choices section below.

4. Third-Party Services We Use

The service providers and partners listed below may collect, receive, or process personal information in connection with the Services. Each operates under its own privacy policy.

Tag Management

Analytics and Attribution

  • Google Analytics 4 tracks and reports Site traffic and user behavior. You can opt out with the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout
  • AdBeacon provides marketing attribution and analytics that help us measure the performance of our advertising campaigns.

Advertising and Remarketing

We and the partners below use cookies and non-cookie technologies, including hashed email addresses and other online identifiers, to show you ads for our products on third-party sites and apps after you visit our Site, and to measure campaign performance across devices and browsers.

You may also opt out of interest-based advertising from participating companies through the DAA (https://optout.aboutads.info) and the NAI (https://optout.networkadvertising.org), and by enabling privacy features on your mobile device.

Affiliate and Partner Tracking

  • Impact (impact.com) tracks referrals from our affiliate and partner marketing programs so we can credit partners for sales. Privacy policy: https://impact.com/privacy-policy/
  • WeCanTrack provides server-to-server tracking to monitor conversion data and attribute performance for our digital and affiliate marketing campaigns. Privacy policy: https://wecantrack.com/privacy-policy/

Email and SMS Marketing

You may opt out of marketing emails by using the unsubscribe link in any email, and opt out of text messages by replying STOP. We may still send transactional messages related to your orders and account.

Identity Resolution and Retargeting

Payments

We do not store or collect your payment card details. Payment information is provided directly to our payment processors, whose use of your personal information is governed by their own privacy policies. Our processors adhere to PCI-DSS standards.

Customer Support and Site Features

5. How We Use Your Information

We use personal information to:

  • Provide, operate, and maintain the Services, including processing orders, payments, shipping, returns, and filter reorder subscriptions
  • Support, monitor, and update connected smart-home hardware and mobile applications
  • Create and manage your account and authenticate users
  • Communicate with you about orders, products, services, promotions, and updates, by email, phone, and SMS
  • Deliver and measure advertising, including interest-based advertising on third-party sites and apps
  • Analyze usage, measure marketing attribution, and improve the Site, our products, and our marketing
  • Provide customer support and respond to your requests
  • Detect, prevent, and address fraud, security incidents, and technical issues
  • Comply with legal obligations and enforce our terms and policies
  • Evaluate or complete a merger, acquisition, financing, reorganization, or sale of some or all of our assets, in which personal information may be among the assets transferred

6. How We Disclose Your Information

We may disclose personal information in the following circumstances:

  • Service providers: with vendors that perform services on our behalf, including the providers listed in Section 4, for payment processing, marketing, analytics, fulfillment, and customer support.
  • Advertising partners: with advertising and identity resolution partners for targeted advertising, which may constitute a sale or sharing of personal information under certain state laws.
  • Affiliates: with corporate affiliates that honor this Privacy Policy.
  • Business transfers: in connection with, or during negotiations of, any merger, acquisition, financing, or sale of company assets. If your information becomes subject to a different privacy policy as a result, we will provide notice.
  • Legal requirements: when required by law or in response to valid requests by public authorities, to protect our rights or property, to prevent or investigate wrongdoing, to protect the safety of users or the public, or to protect against legal liability.
  • With your consent: for any other purpose disclosed to you with your consent.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, including to provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Usage data is generally retained for shorter periods unless needed for security, Site improvement, or legal compliance. When personal information is no longer needed, we delete or de-identify it.

8. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Privacy Rights and Choices (US State Privacy Laws)

Depending on where you live, you may have rights under state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and comparable laws in other states such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Indiana, Kentucky, and Rhode Island. Subject to certain exceptions, these rights may include:

  • Right to know / access: request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties to whom it was disclosed.
  • Right to delete: request deletion of your personal information, subject to legal exceptions.
  • Right to correct: request correction of inaccurate personal information.
  • Right to opt out of sale or sharing: direct us not to sell your personal information or share it for cross-context behavioral advertising.
  • Right to limit use of sensitive personal information: where applicable.
  • Right to portability: receive your personal information in a portable format.
  • Right to non-discrimination: we will not discriminate against you for exercising your rights.

Categories of Personal Information We Collect

Within the last 12 months, we have collected the following categories of personal information as defined by the CCPA:

  • Identifiers (name, alias, postal address, email address, IP address, MAC address, online identifiers): Collected.
  • Customer records (Cal. Civ. Code 1798.80(e)) (name, address, telephone number, payment information processed by our payment processors): Collected.
  • Commercial information (products purchased or considered, purchase history): Collected.
  • Internet or other electronic network activity (browsing history, interactions with the Site, app usage, and our ads): Collected.
  • Geolocation data (approximate location derived from IP address): Collected.
  • Inferences (preferences and characteristics drawn from the above for marketing purposes): Collected.
  • Sensitive personal information: we do not collect sensitive personal information except limited health-related eligibility information you choose to provide directly to TrueMed for HSA/FSA payment, which TrueMed processes under its own privacy policy. We do not use or disclose sensitive personal information for purposes requiring a right to limit under the CCPA.

We do not collect protected classification characteristics, biometric information, sensory data, professional or employment information, or non-public education information.

Sale and Sharing of Personal Information

We may “sell” or “share” (as those terms are defined under applicable state laws) the following categories of personal information with advertising, analytics, and identity resolution partners for targeted advertising: identifiers, commercial information, internet or other electronic network activity, and inferences. We do not sell or share personal information of consumers we know to be under 16 years of age, and we do not knowingly sell or share the personal information of minors under 16 without required affirmative authorization.

How to Exercise Your Rights

We honor opt-out preference signals such as the Global Privacy Control (GPC). When your browser or extension sends a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information linked to that browser.

We may need to verify your identity before responding to a request. You may designate an authorized agent to submit requests on your behalf, subject to verification. We will respond to verifiable requests within 45 days, which may be extended once by an additional 45 days with notice. We will not discriminate against you for exercising your rights.

California Shine the Light

Under California Civil Code Section 1798.83, California residents with an established business relationship with us may request information once per year about our disclosure of personal information to third parties for their direct marketing purposes. To make a request, contact us at support@cloudwaterfilters.com.

Removal of Content by Minors (California B&P Code 22581)

California residents under 18 who are registered users may request removal of content or information they have publicly posted by contacting us at support@cloudwaterfilters.com with the email address associated with the account. Removal may not be complete or comprehensive in all circumstances.

10. Users Outside the United States

The Services are operated from the United States and are intended for customers in the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction. If you are located in the European Economic Area or United Kingdom, we process personal data on the legal bases of contract performance, legitimate interests, legal obligation, and consent, and you may have rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent, as well as the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact us at support@cloudwaterfilters.com.

11. Do Not Track and Opt-Out Preference Signals

Some browsers transmit Do Not Track (DNT) signals. There is no industry standard for responding to DNT, and the Site does not respond to DNT signals at this time. However, as described above, we do honor Global Privacy Control (GPC) opt-out preference signals as required by applicable law.

12. Children’s Privacy

The Services are not directed to anyone under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete it. We do not sell or share the personal information of consumers we know to be under 16 years of age without required authorization.

13. Links to Other Websites

The Site may contain links to third-party websites we do not operate. We are not responsible for the content, privacy policies, or practices of third-party sites, and we encourage you to review the privacy policy of every site you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on this page and update the “Last Updated” date above. For material changes, we will provide notice by email or a prominent notice on the Site prior to the change becoming effective. Your continued use of the Services after changes become effective constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us:

Do you know what’s in your tap water?

Have you thought about what's in your tap water? You should check.