Privacy Policy

Every guild keeps a ledger, and this page explains what goes into ours: the information Side Quest Studios collects, how we use it and the choices you have.

What we collect

When you join the Quest Guild

Your email address
Your name (optional)
Whether you're shopping for yourself or a gift (optional)
Where on the site you signed up, such as a popup or checkout
Your marketing email preference
Your Quest Points history, rank and discount codes
Sign-in tokens, which we store only in hashed (scrambled) form

When you place an order

Payments are processed by Stripe. We never see or store your full card number. We receive:

Your name, email address and shipping address
The items you ordered, including details you give us, like custom hat measurements or NFC programming text
Order amounts, any discount code used and Stripe payment IDs
Tracking details once your order ships

When you request a commission

Your name and email address
Project details, budget, deadline and reference links
Any files you upload. Files are emailed to the owner and are not stored on the website's servers.

Technical information

Our servers process basic technical information, like IP addresses and browser type, to deliver pages and prevent abuse.

Browser storage, not tracking cookies

We don't use tracking cookies or third-party advertising trackers, and we don't use analytics tools. If that ever changes, we'll update this page first and tell you what we turned on.

The site saves a few things in your browser's local storage:

Your shopping bag
Popup preferences
Your Guild session token, which keeps you signed in

Stripe's checkout page follows Stripe's privacy policy and may use its own cookies for security and fraud prevention.

How we use it

To make, ship and support your orders
To run the Quest Guild, including points, discount codes, sign-in links and crediting earlier orders placed with your email
To reply to commission requests and other messages
To send marketing emails, if you've opted in
To understand what's working, like where people sign up and whether they're shopping for gifts
To prevent fraud and abuse and keep the site secure
To keep the records we need for taxes and bookkeeping

We don't sell your personal information, and we don't share it with advertisers. We share it only with services that help run the shop:

Stripe processes payments and runs checkout.
Resend delivers our emails.
Render hosts our website, server and database.
Proton Mail hosts our business inbox, which receives your emails, order and signup notifications, and commission files.
USPS receives your name and address to deliver your order, as does any postage service we use to print labels.

Each follows its own privacy policy. We may also share information if required by law or to protect against fraud or harm.

Emails & unsubscribing

Transactional emails, like order confirmations, shipping updates and sign-in links, still send even if you unsubscribe from marketing.
Marketing emails about new items, restocks, giveaways and offers only go to members who opted in.
Every marketing email includes an unsubscribe link. Unsubscribing doesn't affect your Guild membership or points.

Your choices

Stop marketing emails anytime with the unsubscribe link, or by emailing us.
Review your Guild details, points and codes by signing in to your Guild account, or email us to correct anything.
Get a copy of your data or delete it by emailing us. We may need to confirm the request came from your email address. Deleting your Guild account removes your points and unused codes.
Clear browser storage anytime in your browser settings. This empties your bag and signs you out.
Do Not Track: because we don't track visitors across other websites, our site doesn't respond differently to Do Not Track signals.

Data retention

Guild accounts are kept until you ask us to delete them.
Order and commission records are kept for seven years, which covers tax and bookkeeping record-keeping, then deleted.
Even after a deletion request, we may keep order records required for tax or legal reasons.
Browser storage stays on your device until you clear it.

Security

Stripe handles payments, so card numbers never reach our servers.
Our site uses encrypted HTTPS connections.
Quest Guild sign-in uses one-time email links, so we don't store passwords.
Only the owner has access to our admin tools.
No website is perfectly secure, but we take reasonable steps to protect your information.

Children

Our site isn't directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email us and we'll delete it.

Contact

Side Quest Studios is based in Warner Robins, Georgia, USA.

Email: SQiStudios@proton.me
Mailing address: [Owner to confirm: mailing address, which CAN-SPAM also requires in marketing emails; a registered P.O. box or private mailbox works]

Changes

We may update this policy. When we do, we'll post the new version here and change the date at the top.