Privacy Policy

1. What we collect

• Account info — your name, email address, and profile picture from Google Sign-In. We never see or store your Google password.
• Order and shipping info — delivery addresses, order history, and your chosen fulfillment method (pickup or delivery).
• Payment receipts — the images you upload to prove payment, kept for verification and order-dispute purposes.
• Bank/refund account details — only if you add one for receiving bank refunds. These are encrypted at rest and only decrypted when a refund to that account is actually processed.

2. How we use it

To process orders and pre-orders, verify payments, run allocation when a pre-order campaign closes, issue refunds, and contact you about your orders. We don't sell your personal information to third parties.

3. Where it's stored

Our application data, including payment receipts and account details, is hosted on Supabase infrastructure with access controls restricting who can view what — customers can only see their own orders and data; staff access is limited by role and logged.

4. Your choices

• You can review and update your saved addresses and refund accounts anytime from your account pages.
• You can sign out at any time, which ends your session immediately.
• To request deletion of your account data, contact us — see below.

5. Contact

Privacy questions or data requests can be sent to support@esontcg.com.