Privacy Policy

Information We Collect

We collect the following categories of information:

• Account information. When you create an account with an email and password, we collect your name, email address, and a securely managed password credential.
• Google sign-in information. If you choose “Continue with Google” to sign in, we receive your name and email address from Google to create and identify your account. We do not receive your Google password, and we only receive the basic profile information you approve during Google sign-in.
• Order, shipping, and contact details. When you make a purchase, we collect the items ordered, your shipping address, your billing address, and the contact details needed to fulfill and support your order.
• Payment information. Card payments are processed by Stripe. We do not collect or store your full payment card number. We receive limited transaction details from Stripe (such as a confirmation, the card brand, and the last four digits) to identify and support your order.
• Usage and analytics data. We collect information about how you interact with our store, such as pages viewed, referring pages, approximate location derived from your IP address, browser and device type, and similar technical data.
• Cookies and similar technologies. We use cookies to operate the store, including an authentication session cookie that keeps you signed in, cookies that maintain your cart, and cookies that support analytics. See “Cookies and Sessions” below.

How We Use Your Information

We use the information we collect to:

• Process, fulfill, and ship your orders;
• Create and maintain your account and keep you signed in;
• Send order confirmations, shipping updates, restock notifications, and other transactional email through Resend;
• Respond to your support requests and other questions;
• Calculate applicable taxes and shipping charges;
• Detect, prevent, and respond to fraud, abuse, and security issues;
• Understand and improve our store, products, and customer experience; and
• Comply with our legal obligations.

Third Parties and Service Providers

We share information with service providers who process it on our behalf so that we can run the store. These providers are only permitted to use your information to provide their services to us. They include:

• Supabase — account creation, authentication, and sign-in.
• Google — optional “Continue with Google” sign-in. When you use it, Google shares your name and email address with us so we can create and identify your account.
• Stripe — payment processing.
• ShipStation — shipping and delivery quoting and fulfillment through carriers including USPS and UPS.
• Resend — transactional and order-status email delivery.
• Vercel — website hosting and content delivery.

We may also disclose information when required by law, to enforce our agreements, or to protect the rights, property, or safety of Nat20 Games, our customers, or others. We do not sell your personal information.

Cookies and Sessions

Cookies are small files stored on your device. We use strictly necessary cookies to run core features of the store, including an authentication session cookie that keeps you signed in and cookies that remember the contents of your cart. We also use cookies that help us understand site usage and improve performance. You can control cookies through your browser settings, but disabling strictly necessary cookies may prevent parts of the store, including sign-in and checkout, from working.

Data Retention

We retain personal information for as long as your account is active or as needed to provide the store, fulfill orders, and support you. We also retain information as required to comply with our legal, tax, accounting, and recordkeeping obligations, resolve disputes, and enforce our agreements. When information is no longer needed for these purposes, we take reasonable steps to delete or de-identify it.

Your Choices and Rights

Depending on where you live, you may have the right to access, correct, or request deletion of the personal information we hold about you, and to object to or restrict certain processing. You can update your account details by signing in, and you can ask us to delete your account and associated personal information by emailing us at support@nat20games.gg. We may need to verify your identity before acting on your request, and some information may be retained where an exception or legal obligation applies (for example, records we must keep for tax purposes).

Children's Privacy

Our store is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so that we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the store after an update means you accept the revised policy.

How to Contact Us

If you have questions about this Privacy Policy or your information, contact us at: