Privacy policy
What we collect, why we collect it, and how long it sticks around.
Last updated: 30 August 2026
1. The short version
We need an email address to send your code to, and a record of what you bought in case you come back about it. Payment is crypto, so we never see a card or a bank account. Nothing about you is for sale, and nobody from this shop will ever ask you for your game password.
2. What we collect
- Your email address. Where the code goes, and where we answer you.
- Order records. What you bought, when, what it cost, which code went out.
- Payment details. The deposit address we generated for your order, the transaction hash, the amount, and how many confirmations it has. Crypto only, so there is no card number or billing address to hand over in the first place.
- Whatever you send us. Support messages, screenshots, anything attached to them.
- Server logs. IP address, browser, timestamps. The ordinary kind, kept for fraud and for working out why something broke.
- Store activity. Anonymous, first-party events such as viewing a product, adding it to the cart, starting checkout, selecting a payment network, or opening a quote. These contain a random tab identifier, product id, quantity and mobile/desktop bucket—never an email, wallet address, transaction hash or message.
- Giveaway entries, but only if you enter one. That is section 3.
3. Signing in with Discord
The only sign-in on this site is Discord, and it exists for one reason: giveaways. There is no account to manage and no password held here.
Discord tells us three things about you - your account id, your display name and picture, and whether you are in our server. Those get copied onto each entry you place, so we can draw a winner and then actually find them afterwards. Your Discord email address never reaches us. We do not ask for it.
Your Discord password never reaches us either. The token Discord issues while you sign in is used once and thrown away, which is also why your server membership only updates when you sign in again.
Every entry carries a scrambled version of the IP it was placed from. It only goes one way. We can see that fifteen entries came from one connection, which is the entire point of it, and we cannot read an address back out.
Winners get their name and picture posted on the giveaways page. Account ids never go up there. Signing out clears the cookie. Entries you already placed stay in the draw unless you ask us to pull them, which is section 9.
4. What we never collect
Your game account password. We do not want it and there is no part of buying a cape that needs it. If someone says they are us and asks for it, they are not us. Do not reply to them.
5. Why we hold any of it
To get you your code, to answer you when something goes wrong, to catch fraud, and to keep the accounting records we are legally stuck with. There is no advertising side to this shop, so there is nothing here to build a profile for, and no tracker from anybody else runs on these pages.
The anonymous store-activity events tell us where checkout is confusing. They stay on our own server, respect Do Not Track and Global Privacy Control, and are never used for advertising.
6. Who else sees it
Our payment provider, our email provider, and the company hosting the site. None of them get more than the piece they need. Nobody buys data from us, because there is none for sale.
A valid legal order gets answered. If we are allowed to tell you it happened, you will hear about it from us.
7. Cookies
Your cart and your light/dark setting sit in your own browser's storage. They are never sent anywhere. Clearing your browser data clears them.
There is exactly one real cookie, and only if you signed in with Discord for a giveaway. It holds your Discord name, picture and id, signed so it cannot be edited, and it expires after 30 days. Signing out deletes it. Nothing on this site sets a third-party cookie.
8. How long we keep it
Orders and issued codes, two years - long enough that we can find your code again when the email goes missing. Financial records for as long as tax law says, which is usually longer. Support conversations, two years. Server logs, 90 days.
Giveaway entries last as long as the draw is still listed, so a published winner stays checkable. Delete the giveaway and every entry in it goes with it.
9. Your rights
Ask for a copy of what we hold, ask us to correct it, or ask us to delete it. We will. The one exception is the financial records we are required to keep - everything else around them goes, those stay.
Message us on Discord with "data request". We have 30 days to sort it out and it is normally the same week.
10. Security
Everything runs over HTTPS. Order data is reachable only by whoever is running support. We are a small operation, which cuts both ways: far fewer people ever touch your data, and we are not going to stand here claiming we are built like a bank.
11. Children
This store is not aimed at anyone under 13 and we do not knowingly hold their data. If you think we have a child's information, tell us and we will get rid of it.
12. Contact
Anything about this policy goes through Discord.