What we collect
- Account details: your name, email address and a securely hashed version of your password. We never store your password itself.
- Order details: what you bought, prices, your order number, and anything you type at checkout, such as your Roblox username or a note.
- Payment references from PayPal: the PayPal order and transaction IDs and the email on your PayPal account. We never receive your PayPal password or full card details.
- Requests and alerts: if you request an item or ask to be emailed when one is back in stock, the email address (and Discord username, if you give one) and details you enter.
- Technical data: a login cookie, and your IP address, which is used briefly to protect sign-in, checkout and our forms from abuse.
Your bag is stored in your own browser until you check out.
How we use it
To create and secure your account, process and deliver your orders, answer support and item requests, prevent fraud, and meet legal and accounting obligations. We email you about your own orders (when your payment is confirmed and when your order is delivered), and send one email when an item you asked about is back in stock. We don't send marketing emails and don't sell your information.
Who we share it with
- PayPal, to process your payment. PayPal's own privacy policy applies to what you enter in its checkout.
- Our hosting provider ([hosting provider name]), which stores the website and its database.
- Authorities, only if the law requires it.
Cookies
We use one essential cookie to keep you signed in. We don't use advertising or tracking cookies. PayPal's checkout may set its own cookies when you use it.
How long we keep it
Order records are kept for [number] years for accounting. You can ask us to delete your account at any time; we'll delete or anonymise what we don't need to keep by law.
Your rights
You can ask to see, correct or delete your information by contacting us through Discord or at [contact email]. Depending on where you live, you may also have the right to complain to a data protection authority.
Children
[State the minimum age for creating an account, and how a parent can contact you about a child's account.]