Privacy.

The short version: I collect as little as I can get away with, I keep a count of what gets looked at so I know what to stock, I don’t build a profile of you, and I don’t sell anything about you to anyone. The longer version is below, and it’s short too.

Browsing the shop

The pages are plain HTML assembled on the server. The one piece of code that runs in your browser is PostHog, which counts page views and clicks — which listings get opened, which never do, where people give up on the cart. That’s a one-person shop working out what’s worth buying next, not an advertising machine.

It records those counts and nothing else. There is no session recording: your screen, your mouse and what you type are not captured. Your name and email aren’t in it, because the shop never asks who you are to let you browse. It is served from this domain rather than a third-party tracking host, so nothing follows you off this site, and the numbers are never sold or handed to advertisers.

If your browser sends “Do Not Track,” none of that runs at all — the counting switches itself off and your visit isn’t recorded.

That makes two cookies. The cart: add something and your browser holds a plain list of the item numbers you picked, so the cart survives between pages — it contains nothing else, is never shared, and expires on its own after two weeks, or immediately when you check out. And the counter: a random number that lets a second page view in one visit count as one person rather than two. It isn’t tied to your name, your email, or anything you do anywhere else.

If you join the new-finds list

I keep your email address, the page you signed up from, and the date. That’s the whole record. It’s used for one thing: telling you when fresh pieces go in the case. Reply to any email — or write to me — and you’re off the list for good.

If you buy something

Checkout is handled by Stripe. They collect your name, email, shipping address and payment details, because someone has to in order to charge a card and post a parcel. I never see or store your card number.

What my own records keep is deliberately thinner: what was paid, when, and Stripe’s reference for the payment. Your shipping address stays with Stripe, where I look it up to pack and post your order. My books hold the money, not you.

The review survey, and what Google is told

On the confirmation screen after you pay, Google offers to email you in a few weeks and ask how the order went. That’s Google Customer Reviews. Answering is optional and so is being asked — decline on that screen and no email is sent.

Being offered it is not free of consequence, though, and you should know the whole of it: to make the offer at all, that page hands Google the details of your order — what you bought, what it cost, when, the order number, and your email address — whether or not you take the survey up. Google uses that under its own privacy policy, not mine, and keeps the right to go on using it even if I leave the programme. Your answers, if you give any, become the shop’s star rating on Google.

This is the one place where the shop hands a company more about you than it strictly needs to sell you a game. It buys the rating that helps a one-person shop look trustworthy next to the big sellers. If you’d rather not be part of it, decline on the confirmation screen.

The four other companies involved

Stripe processes payments and holds the order details described above. Cloudflare serves this site, so their servers handle the request your browser makes and keep ordinary short-lived server logs. PostHog holds the page-view counts described above — your browser never talks to them directly, because those requests go through this domain first. Google serves the typefaces, which means your browser fetches them from Google and Google can see your IP address when it does — the one third party your browser contacts by itself on a normal page view. Google also runs the review survey at checkout, and receives the order details described above when it does.

Managing cookies

Every browser can show you the cookies a site has set, delete them, and refuse new ones — it’s in Settings, usually under “Privacy” or “Cookies and site data.” Blocking them costs you the cart, which needs its cookie to remember what you picked; the rest of the shop reads fine without a single one.

The companies named above may also set their own cookies, or use web beacons and similar tags, when their code runs on a page — Google does when the review survey is offered at checkout. Those are subject to the same browser controls, and to each company’s own privacy policy rather than this one.

How long I keep things

Order records stick around as long as I need them for tax and bookkeeping — the same reason any shop keeps receipts. Email addresses on the new-finds list stay until you ask me to remove them, and then they’re gone.

Asking what I have

Write to me and ask what I hold about you, or ask me to delete it, and I will. No forms, no hoops — it’s one person reading the mail.

Questions

Anything at all: sales@greybeard.games, or the contact page.