Privacy

We do not have customer accounts or sell your personal data. We store order details when you check out, contact information when you write to us, and your email when you consent to our newsletter. Payments are handled by Mollie; we do not receive your card or bank credentials.

When you add a token to your bag, we save it in your browser's local storage under the name rifttokens-bag so your selection is still there after a refresh or when you come back later. Each entry only holds which product, which pack size and how many. Nothing about who you are.

Your bag is stored locally while you browse. At checkout, your selection is sent to us to calculate the price and register your order. To clear local bag data, empty your bag or use your browser's site settings (under Privacy / Site data, look for this site and remove its stored data). Closing your browser tab does not clear it; deleting it does.

Contact messages include your name, email, subject and message, and are sent to info@rifttokens.nl through Resend. We use them to answer your enquiry, on the basis of steps towards a contract or our legitimate interest in responding to other questions. Please do not include payment credentials or sensitive personal information.

Newsletter sign-up stores your email, consent time and sign-up source in Lovable Cloud. This is based on your consent and is separate from ordering. Withdraw consent or unsubscribe at any time by emailing info@rifttokens.nl. Newsletter sending uses Resend when we send a drop update. We keep subscriptions until you unsubscribe; contact messages only as long as needed to handle the enquiry and any related dispute.

We store your name, email, address, selected cards, finish, quantities, totals, order number and payment status in Lovable Cloud to process the order. Mollie receives the payment amount, order reference and information you supply on its payment page. Paid-order alerts containing order and delivery details are sent to our private inbox through Resend.

Processing is necessary to perform your purchase contract and meet legal accounting duties. Required accounting records are retained for the Dutch statutory period, generally seven years; other order information is kept only as long as needed for fulfilment, returns and disputes. Uncompleted orders are retained only as needed for resolving issues.

The typefaces on this site (Fredoka and Nunito) are loaded from Google's servers, so your browser opens a connection to Google when a page loads and Google can see your IP address as part of that request. We use this on the basis of our legitimate interest in presenting the site consistently. Hosting and artwork delivery also involve our service providers.

The site is hosted for us, and like almost every website the hosting platform keeps short-lived technical logs of each visit: IP address, the page requested, the time of the request and the browser used. Those logs exist to keep the site online and to spot abuse, not to build profiles about visitors, and they are not combined with anything else we know.

You can ask us what we know about you, ask us to correct or delete it, ask us to limit how it's used, object to processing based on legitimate interest, and ask for a copy of anything you gave us in a portable format. If you ever gave consent you can withdraw it again at any time.

If you think we handle your data wrongly, you can also lodge a complaint with the data protection authority in your own EU country. We'd rather you write to us first, though.

We don't sell, rent or trade personal data, and we don't pass it to advertisers. The only disclosures are to service providers needed for hosting, order storage, payments, email and delivery, or where the law requires disclosure. Where a provider processes data outside the EEA, applicable safeguards such as adequacy decisions or standard contractual clauses are required.

This site isn't aimed at children under 16 and we don't knowingly collect information from them. If you think a child has given us something they shouldn't have, tell us and we'll remove it.

If what we collect changes, we rewrite this page and move the "last updated" date above forward. Nothing here is designed to surprise you quietly.

Questions, a deletion request, or just a curious "why?": email info@rifttokens.nl or use the contact page. The data controller is Rifttokens, Salamancapad 197, 3584 DX Utrecht, The Netherlands, KvK 92256163, BTW NL003924576B81.