1. Data we collect
Account data: email address, name if you provide one, and a hashed password. We never store passwords in plain text.
Order data: items purchased, shipping address, order value and status. Payment card details are handled by the payment provider and never reach our servers.
Technical data: IP address, browser type, pages requested and timestamps, kept in server logs for security and abuse prevention.
Optional: a wallet address, if you choose to connect one to claim an edition certificate.
2. Why we process it
To fulfil orders and provide customer support; to detect fraud and abuse; to meet tax and accounting obligations; and to improve the catalogue based on aggregate page usage.
We do not sell personal data, and we do not share it with advertising networks for cross-site profiling.
3. Cookies and advertising
Essential cookies keep your cart and session working. Analytics cookies are aggregated and only set with consent where consent is required.
Advertising cookies are controlled by Google Consent Mode. They are set to denied by default and only activated if you accept advertising cookies in the consent banner.
4. Retention
Order records are kept for seven years to satisfy tax and accounting rules. Account data is kept until you delete the account, plus any period required by law. Server logs are kept for 30 days.
5. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or port your data, and to object to certain processing. Write to us and we will respond within 30 days.
If you are in the EEA or UK you may also complain to your local supervisory authority.
6. Processors
We use Cloudflare for hosting and storage, and payment processors for transactions. Each processor is bound by a data processing agreement and may only process data on our instructions.
7. Contact
Privacy questions: [email protected].