Privacy Policy

1. Introduction

GamerThor ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website and services.

We process personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

Account Information

When you create an account, we collect your name, email address, and profile information provided by your OAuth provider (e.g., Google).

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card numbers or payment credentials. Our payment processors may share limited transaction data with us (e.g., last four digits of the card, billing country).

Browsing Data

We collect information about your interactions with our website, including pages visited, products viewed, search queries, IP address, browser type, device information, and referring URLs.

Order Data

We store records of your purchases, including products ordered, prices paid, order dates, and delivered game keys.

3. How We Use Your Data

We use your personal data to:

• Provide and maintain our Service
• Process your purchases and deliver game keys
• Manage your account and provide customer support
• Send order confirmations and transactional emails
• Detect and prevent fraud
• Improve our website and user experience
• Comply with legal obligations (e.g., tax records, anti-fraud requirements)

4. Third-Party Services

We use the following third-party services that may process your data:

• FusionAuth — Authentication and identity management
• Stripe — Payment processing
• Grafana Faro — Site performance and error monitoring, only if you allow analytics in the cookie settings

Each third-party provider operates under their own privacy policy. We encourage you to review their policies.

5. Cookies

We use cookies and similar technologies to operate our Service. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access — You can request a copy of the personal data we hold about you.
• Right to Rectification — You can request correction of inaccurate or incomplete data.
• Right to Erasure — You can request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability — You can request your data in a structured, machine-readable format.
• Right to Restrict Processing — You can request limitation of how we process your data.
• Right to Object — You can object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Data Retention

• Account data — Retained until you delete your account. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
• Order records — Retained for 7 years to comply with tax and financial reporting obligations.
• Analytics data— Retained for up to 26 months in accordance with our analytics provider's default settings.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption of data in transit (TLS/HTTPS), secure authentication, and access controls. However, no method of electronic transmission or storage is 100% secure.

9. International Transfers

Your data may be processed in countries outside the EEA. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our website. The date at the top of this page indicates when the policy was last updated.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:

[email protected]