We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising. At any time, you may submit a Privacy Request to exercise your rights to know, delete, correct, and opt out of sale or sharing. For details, see the Privacy Policy and the CCPA/CPRA Notice.
Identifiers
Includes name, email, phone number, and account. Used to create your account, process orders, contact you for customer service, and verify your identity. Retained for the life of your account; after deactivation or a deletion request, anonymized within about 730 days (except where retention is required by law). Not sold; not shared.
Login Credentials
Includes password hashes and verification/reset tokens. Used for account security and sign-in. Password hashes persist for the life of your account; tokens expire after about 30 days or upon use. Not sold; not shared.
Commercial Information
Includes order contents, shipping addresses, design artwork, group store data, and any player names you choose to provide. Used for order fulfillment, printing, shipping, tax reporting, and dispute resolution. Order, tax, refund, and tax-exemption records are kept at least about 1460 days (California sales tax records generally must be kept for four or more years); addresses about 730 days; player and buyer notes about 1095 days, extended during legal holds or disputes. Not sold; not shared.
Payment Information
Handled by Stripe for payments and refunds. We do not store full card numbers. Retention periods are governed by Stripe and accounting obligations. Not sold; processed only by service providers in order to provide services.
Internet Activity
Includes IP address, device information, and the cookies and localStorage used by the cart and the design tool. Used for security, fraud prevention, preserving checkout drafts, and recording GPC/opt-out preferences. Most data persists only for the session; carts are cleared automatically after about 30 days and checkout drafts after about 14 days. Not sold; not shared.
Communications
Includes form submissions, privacy requests, and tax-exemption certificates. Used to respond to your requests and to keep compliance records. Contact and quote records are kept about 730 days; privacy requests about 1095 days; tax certificates at least about 1460 days. Not sold; not shared.
Additional Information
Before exporting or deleting data, we will conduct reasonable identity verification. This service does not direct targeted advertising to children under 16, and we do not knowingly sell or share the personal information of consumers under 16 years of age.
