Privacy Policy

1) Scope

Welcome to Good Games Well Played LLC (“we,” “our,” “us”). This Privacy Policy explains how we handle information when you browse our site, create an account, or place an order. We primarily serve customers in the United States and do not target users in the EU/UK with localized rights flows.

2) Data We Collect

• Account & Orders: We collect only your name and email address to create your account and associate it with your orders.
• Order Metadata: We may store non-sensitive order metadata such as Stripe IDs (e.g., customer_id, payment_intent_id) for reconciliation and support.
• Server/Security Logs: Standard logs (e.g., IP address, user agent, error logs) for security and debugging.
• We do not collect: Full payment card details (handled by Stripe). We also do not collect photos/IDs.

Shipping addresses are handled within Stripe’s checkout/flows. We may view shipping details within Stripe solely to fulfill your order, but we do not store full card data on our servers.

3) How We Use Your Information

• To process orders, provide receipts, and send shipping updates.
• To maintain your account and order history.
• To secure our website, prevent fraud/abuse, and fix bugs.
• To understand site performance and improve the customer experience.

4) Payments (Stripe)

• Online payments are processed by Stripe. We do not store full card numbers on our servers.
• We may store Stripe-issued identifiers (e.g., customer_id, payment_intent_id) with your order for support and refunds/corrections if needed.

5) Shipping & Tracking

• We ship via USPS for website orders (U.S. only).
• We may store tracking numbers with your order record and display them to you.
• International customers are directed to our eBay store and are subject to eBay’s own policies.

6) Cookies, Google Analytics & reCAPTCHA

• Functional Cookies: We use essential cookies for things like session/login, security (e.g., CSRF), and (if applicable) cart/order flow.
• Google Analytics: We use Google Analytics to understand site usage in aggregate. Google may set cookies and receive pseudonymous usage data (e.g., pages viewed, device/browser info, approximate location). You can learn more in Google’s privacy policy and opt-out options.
• Google reCAPTCHA: We use reCAPTCHA to protect forms from abuse. reCAPTCHA collects hardware and software information and sends it to Google for analysis.

Use of Google services is subject to the Google Privacy Policy and Google Terms of Service. We do not use ad pixels for cross-site targeted advertising.

7) Sharing with Service Providers

• Hosting: Our website is hosted with IONOS.
• Payments: Stripe processes online payments and may receive data necessary to process your transaction.
• Shipping: USPS receives shipping information to deliver your order.
• Analytics & Security: Google Analytics for site analytics and Google reCAPTCHA for bot protection.

We do not sell your personal information. We share data only with providers needed to operate our store and fulfill orders, under appropriate agreements.

8) Security

• We use HTTPS to encrypt data in transit.
• Passwords are stored using industry-standard hashing (e.g., bcrypt) where applicable.
• Access to production systems is limited to authorized personnel with a need to know.

No method of transmission or storage is 100% secure; we work to protect your data using reasonable measures.

9) Data Retention

• Orders & Tax Records: Retained for up to 7 years to meet accounting and legal obligations.
• Accounts: Kept until you request deletion or the account becomes inactive for an extended period.
• Server Logs: Typically retained for ~60 days for security and troubleshooting.

10) Your Choices & Rights

• Access/Correction: You may request a copy of your data or corrections to it.
• Deletion: You may request account deletion (subject to retaining order records we must keep for legal reasons).
• Communications: We send order/shipping confirmations from our own server. We do not send newsletters or marketing unless you explicitly opt-in on a product page.

To help us verify your request, we may ask you to contact us from the email on file and provide an order number or other basic details.

11) Minors

Accounts are limited to users 18 years and older. We do not knowingly collect personal information from individuals under 18.

12) Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Effective Date.”

13) Contact

Questions or privacy requests? Email us at LevelUp@GoodGamesWellPlayed.com.