DRAFT · FOR REVIEW
Privacy at Storm Rig
This notice is a draft. TODO(Andrew): confirm the legal controller, mailing address, retention policy, processors and applicable privacy rights before commercial launch.
Email sign-up
We collect your email only when you ask for Storm Rig game news and merch updates. It is encrypted on the server. We send one confirmation email through ProvedUp’s connected Google mail account. Your address is not added to the confirmed list until you press Confirm.
Confirmation links expire after 24 hours. Expired pending records are removed on the next sign-up request. Confirmed addresses stay until you unsubscribe. Rate-limit counters use hashed IP and email values and expire after at most 24 hours; expired counters are cleaned on a successful sign-up request.
Your choice
Use the unsubscribe link in your confirmation email to remove your address and consent record. Only the owner, signed in with a passkey, can export confirmed addresses. The site has no store or payment collection yet.
Site services
The shared ProvedUp kit provides version, security and optional help/feedback tools. If you send feedback, it goes to ProvedUp. Hosting and email providers process requests needed to deliver the site and confirmation mail. Server access logs may include network addresses.
Contact
For privacy questions or removal if you have lost your link, email provedup@gmail.com.
Store orders · DRAFT
Stripe collects payment and delivery details. Printify receives the details needed to print and ship. Order details are stored encrypted on our server. Transactional confirmation and tracking emails are separate from the optional news list. TODO(Andrew): confirm the legal seller, retention period, processor notices, international transfers and privacy rights contact before opening checkout.