Privacy policy

What we collect

• Your account: name, email and password (stored only as a one-way hash, never readable). Optionally your phone and delivery address, if you save them.
• Your orders: name, email, phone, delivery address and city, what you bought, the price and how you paid.
• Messages: what you send through the contact form goes to our email inbox. On the site we keep only your email and network address, to limit spam.
• Newsletter: your email, if you sign up.
• Reviews: your rating, comment and the name shown with it.
• Security records: when you sign in, the device and network address of each session, so you can sign out other devices and we can spot abuse.

We never ask for or store card numbers. Bank transfers happen in your own banking app.

How we use it

• To process, deliver and support your orders, and to answer your messages.
• To run your account: your orders, tracking, wishlist and reviews.
• To send the newsletter, only if you asked for it.
• To keep the site safe: limits on repeated attempts, and spotting fraud.
• To keep the records the law requires for sales.

Who we share it with

We do not sell your information. We share only what each of these needs to do its job for us:

• TCS, our courier: your name, phone and delivery address, to deliver your order.
• Our email provider (currently Google): to send order and account emails and receive your messages.
• Our hosting and database providers (including Supabase), which store the site's data securely on our behalf.
• Authorities, where the law requires it.

Cookies and your browser

• One cookie keeps you signed in. Without it, accounts can't work.
• Your cart, recently viewed products and the site's small hidden games are saved in your own browser, not on our servers. While you are signed in, your name and email are kept there too, so the menu shows your account straight away; signing out removes them. Clearing your browser data removes all of these.
• We don't use advertising or tracking cookies.

How long we keep it

• Your account stays until you ask us to delete it.
• Order records are kept as our sales records, including after an account is deleted.
• If you stop the newsletter, we keep your email marked as unsubscribed, so it can't be added back without you signing up again.
• Sessions end after 30 days without use, or when you sign out.

How we protect it

The site runs only over an encrypted connection. Passwords are stored as one-way hashes, sign-in attempts are limited, and only you can see your orders and details. Staff access to the store's admin is limited to the people who need it.

Your choices

• See and correct your details any time in your account.
• Stop the newsletter from any newsletter email, or in your account.
• Sign out of your other devices in account security.
• Ask for a copy of your information, or for your account to be deleted, by messaging us. Order records the law requires us to keep stay until that time is up.

Changes and contact

If we change how we use your information, we update this page and its date. Questions about your privacy? Message us.