Privacy Policy

What we collect

• Order data: email address, BattleTag or character name, optional Discord handle, the realm you ordered for, the items, prices, and payment status. Also your IP address and browser user agent, for fraud prevention.
• Support data: the messages you send us and the email you send them from.
• Builder data: saved builds are public by their link; they contain a class, level, item choices and the realm — no personal data unless you type it into the build name.
• Technical data: a cookie for your realm selection, your cart in your browser's local storage, and basic privacy-friendly analytics.

What we do not collect

We never receive your card number, expiry or CVV. Card payments are handled entirely by our on-ramp partner. We do not receive your Game account password and will never ask for it.

Payment processors and KYC

Crypto payments are processed by NOWPayments. If you pay by card, the on-ramp partner (Guardarian, via NOWPayments) will collect identity documents to satisfy anti-money-laundering law. That data is held by them under their privacy policy; we receive only the payment status and amounts.

Why we use it

To deliver your order, to answer support, to prevent fraud and abuse, and to comply with law. We do not sell personal data and we do not send marketing email unless you asked to be notified about an item.

Who else sees it

Our infrastructure providers (hosting, database, email delivery, DDoS protection) process data on our behalf under their own contractual safeguards. Our staff see order and ticket data to fulfil and support your order. We disclose data if legally required.

Retention

Order and payment records are kept for as long as accounting and anti-fraud obligations require (typically several years). Ticket threads are kept for 24 months after closure. Notify-me requests are deleted once sent or after 12 months.

Your rights (GDPR / CCPA)

You can ask for a copy of your data, correction, or deletion where we are not required to keep it. Email [email protected] from the address you used and we will act within 30 days. We do not sell personal information as defined by the CCPA.

Cookies

One functional cookie stores your realm. The admin area uses a session cookie for staff only. Cloudflare may set a security cookie to protect the site.

Children

The site is for adults. We do not knowingly collect data from anyone under 18.

Changes

We will post updates here with a new date.