Privacy policy

This document identifies who is responsible for processing your personal data when you use this website (the "Site") and shop through it, what data we collect, why, who we share it with, and what rights you have.

Data controller

• Legal name: [Company legal name]
• Tax ID: [Tax ID / VAT number]
• Address: [Registered business address]
• Contact email: [contact email]

What data we collect and why

• Account and order data: when you create an account or place an order, we collect (via Shopify, our commerce platform) your name, email, phone number, and shipping/billing address(es), to manage your account, process orders, and contact you about them.
• Technical browsing data: we use cookies that are strictly necessary for the cart and login to work — see our Cookie Policy for full details.
• Character creator designs: if you use the character creator tool, your designs are stored only in your browser's local storage and are not sent to our servers.
• Communications: if you contact us, we process the data you provide (name, email, message content) to respond to your request.

Legal basis for processing

• Performance of a contract: managing your account and processing/shipping your orders.
• Legal obligations: e.g. tax and accounting requirements.
• Legitimate interest: Site security and fraud prevention.
• Consent: whenever we explicitly ask for it for a specific purpose.

Who we share your data with

We do not sell your data. We only share it with the providers necessary to run the service:

• Shopify Inc. — e-commerce platform: customer account management, order and payment processing. Privacy policy: shopify.com/legal/privacy
• Cloudflare, Inc. — hosting and security infrastructure for the Site. Privacy policy: cloudflare.com/privacypolicy

These providers may process data outside the European Economic Area; where that happens, they rely on GDPR safeguards such as Standard Contractual Clauses.

How long we keep your data

We retain your data for as long as your account is active or as needed for the purpose it was collected for, and afterward for the periods required by applicable law (e.g. tax and accounting obligations).

Your rights

You have the right to access, rectify, and erase your data, as well as to object to its processing, request restriction, request portability, and withdraw consent at any time.

To exercise these rights, write to us at [contact email]. You may also file a complaint with the Spanish Data Protection Agency (aepd.es) if you believe we haven't handled your data properly.

Minors

The Site is not directed at minors. Purchases must be made by adults, or with the authorization of a legal guardian.

Security

We apply reasonable technical and organizational measures to protect your data: encrypted connections (HTTPS) and protected session cookies.

Changes to this policy

We may update this policy. The "last updated" date at the top of the page indicates the version in force.