Privacy Policy

Overview

OnlyBikes (“we,” “us,” or “our”) operates an online store selling e-moto parts and accessories to customers in Canada. This policy explains what personal information we collect, why we collect it, and how you can request access or correction.

We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Business location

OnlyBikes is proudly operated out of Toronto, Ontario, Canada. For all inquiries, support, or data privacy requests, please contact us directly at support@onlybikes.shop.

Information we collect

• Account details: name, email address, password (stored securely hashed), and rewards balance.
• Order and shipping details: shipping address, phone number, order contents, and delivery preferences.
• Payment information: payments are processed by Stripe. We do not store full credit card numbers on our servers. Stripe may collect card and billing details according to its own privacy policy.
• Communications: messages you send to support, fitment questions, and newsletter preferences if you opt in.
• Technical data: IP address, browser type, pages visited, and device information used for fraud prevention, site performance, and aggregated analytics.
• Optional AI roast feedback: if you like/dislike an AI bike read and consent on the page, we may store the bike photo, the AI’s interpretation, your vote, a hashed IP, and timestamps (see AI roast / PvP feedback below).
• Face Live PvP: match scores/outcomes, watch-party vote tallies, friend codes, and match metadata (see Face Live PvP and Solo Face Roast below). Solo Face Roast scoring stays on-device; we do not upload face photos for that feature under normal operation. We do not collect like/dislike “did we look good” feedback for face looks.

How we use your information

• Process and fulfill orders, including shipping labels and tracking updates.
• Provide customer support and fitment assistance.
• Operate the OnlyBikes Rewards program and apply eligible discounts.
• Send order confirmations, shipping notifications, and account-related messages.
• Detect fraud, abuse, and unauthorized transactions.
• Improve the website and product catalog based on aggregated usage patterns.
• With your consent, improve entertainment AI used in Bike Roast and Live PvP (not for certification or fitment guarantees).
• Operate Face Live PvP matches, watch parties, and audience voting (entertainment only; not medical or beauty certification).

AI roast / PvP feedback

Bike Roast and Live PvP are entertainment features. After the AI shows what it thinks your bike is, you may optionally like or dislike that guess. Voting is not required to use the feature.

When you check the consent box and submit a vote, we may store:

• Photo / frame: the bike image associated with that roast job or PvP match
• AI interpretation: guessed make, model, mods, condition, and related summary fields
• Your vote: like or dislike
• Hashed IP and timestamps: for rate-limiting, abuse prevention, and retention tracking (we do not store your raw IP with the feedback row)

Purpose: improve OnlyBikes entertainment AI (vision accuracy and roast quality). Feedback data is not a certification, appraisal, or safety inspection of your bike.

Retention: we typically keep these records for up to 24 months, delete them sooner when no longer needed, or remove them upon a valid deletion request when we can reasonably identify the record.

Deletion: email support@onlybikes.shop with subject “Privacy request — roast feedback” (or use Support), and include approximate date/time and any job or match details you have. Related terms: Terms — Bike Roast / Live PvP AI feedback.

Face Live PvP and Solo Face Roast

Face Live PvP is a timed entertainment mog battle. Solo Face Roast is a separate entertainment looks-score feature. Neither is a dating or chat service. You must be 18+ to use either (see Terms — Face Live PvP and Solo Face Roast).

Solo Face Roast (on-device): Looks scoring runs in your browser using face landmarks. Under normal operation we do not upload your face photo, camera frames, or landmark coordinates to OnlyBikes servers for Solo Face Roast. Ordinary site session, credits, or ad systems on the page do not receive your face image.

Face Live PvP: Looks scoring also uses on-device face landmarks. We receive match scores, outcomes, and related match metadata on our servers to run the duel and show results. Live video between duelists is exchanged peer-to-peer when WebRTC connects. Scores are entertainment only — not medical, dermatological, or beauty certification.

Apparent-age filter: A technical filter may block faces that appear to be 13 or under. The filter is imperfect; young-looking adults may still pass. Eligibility remains 18+ under our Terms regardless of filter results.

Watch parties, audience votes, and friend codes (Face Live PvP only): Spectators may join via friend codes and cast audience votes. Data we may retain includes:

• Vote tallies and related audience-vote metadata
• Friend codes used to join or invite
• Match metadata such as match IDs, timestamps, scores, and outcomes

We do not retain full video of Face Live PvP sessions by default. Camera frames used for on-device landmark scoring are not stored as a continuous recording on our servers under normal operation.

No face “looks” feedback: We do not run like/dislike “did we look good” feedback collection for face looks. Optional like/dislike feedback described under AI roast / PvP feedback applies to bike reads only, not Face Live PvP or Solo Face Roast faces.

Conduct and reports: Harassment and NSFW content are prohibited. You may quit or report a Face Live PvP match. Contact support@onlybikes.shop for privacy or safety concerns related to these features.

When we share information

We do not sell your personal information. We share data only with service providers that help us run the store, including:

• Stripe for payment processing.
• Shipping carriers and fulfillment partners (such as Chit Chats or Canada Post) to deliver your order.
• Email and hosting providers to send transactional email and operate the website.

These providers may only use your information to perform services for us. We may also disclose information if required by law or to protect our rights, customers, or the public.

First-party analytics

We run first-party analytics on our own servers through logger.js, which sends events to /api/log-event.php. This helps us understand how visitors use the site without selling data to third-party analytics vendors.

• Session identifiers assigned for your browser session to group page activity.
• Anonymous user ID stored in localStorage under the key onlybikes_user_id (created on first visit if not already present).
• Page events such as page views, scroll depth, clicks, cart actions, checkout steps, and errors.

This data is used for site improvement, fraud prevention, and operational reporting. It is not shared with advertising networks for targeting.

Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember cart contents, and support the analytics described above. You can disable cookies in your browser, but some features (such as checkout or account login) may not work correctly.

Cloudflare CDN and security

Our website is delivered through Cloudflare’s content delivery network (CDN) and Web Application Firewall (WAF). Cloudflare processes technical data such as your IP address, request headers, and traffic patterns to cache content, mitigate attacks, and improve performance. Cloudflare acts as our infrastructure provider. See Cloudflare’s privacy policy for details.

Advertising

Some pages, including our free Bike Roast event, show third-party advertisements to help cover hosting and AI costs. Ad partners may use cookies or device identifiers to serve and measure ads.

• Google AdSense may show ads on Bike Roast battle pages when you play. Learn how Google uses data at Google’s partner sites policy, or manage ad personalization in Google Ads Settings.
• Other ad partners may serve sponsored messages on roast pages when Google has no ad to show. Those partners have their own privacy practices.

Roast modal telemetry (planned): On Bike Roast pages we may collect operational telemetry about advertisement modals—including whether an ad filled, was blocked, or how long it was viewed—to measure ad performance and keep the free event sustainable. This telemetry is operational only: we do not send your order history, account details, or checkout information to ad networks.

We do not share your order or account details with ad networks for targeting. Advertising is separate from checkout and account login.

Retention

We keep order and account records as long as needed to fulfill orders, meet tax and accounting requirements, resolve disputes, and enforce our agreements. You may request deletion of your account when no open orders or legal obligations remain.

Optional AI roast / PvP feedback (photo, AI guess, vote) is typically retained for up to 24 months as described in AI roast / PvP feedback.

Face Live PvP match metadata, vote tallies, and friend codes are retained as needed to operate matches, prevent abuse, and resolve reports, as described in Face Live PvP and Solo Face Roast. Full video is not retained by default. Solo Face Roast does not upload face photos under normal operation.

Your rights

Under Canadian privacy law you may request access to the personal information we hold about you, ask us to correct inaccurate information, or withdraw consent for optional communications such as marketing email. To make a request, contact us at support@onlybikes.shop with the subject line “Privacy request” and include your name and order email.

Children

Our store is not directed to children under 13. We do not knowingly collect personal information from children. Face Live PvP and Solo Face Roast are restricted to users 18 years of age or older (see Face Live PvP and Solo Face Roast and Terms). A technical apparent-age filter may block faces that appear 13 or under; it does not replace the 18+ rule.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after changes means you accept the updated policy.

Contact

Questions about privacy: support@onlybikes.shop