Privacy Policy

Duelistonly ("we," "us," or "our") operates the online store at duelistonly.com and an in-person point of sale based in Austin, Texas. This Privacy Policy applies to our website, online orders, customer accounts, and in-store purchases. By using our store, you agree to the practices described here.

We collect only the information we need to run the store and fill your orders:

• Account information — your name, username, and email address, plus a securely hashed password. We never store your password in plain text.
• Order and shipping information — the shipping and billing address and phone number you provide, the items you purchase, and your order history.
• Payment information — processed by Square (see Payments). Your full card number and security code are never stored on our servers. If you choose to save a card for faster checkout, we keep only a secure token from Square plus limited details used to display the card, such as the card brand, last four digits, and expiration date.
• Communications — messages you send us (for example, support requests), the email address you provide if you sign up for our email updates, and the transactional emails we send you.
• In-store purchases — the items and totals of your purchase, and an email address if you ask us to send a receipt.
• Saved lists and preferences — items you add to your wishlist and any decks you build in your account.
• Limited technical information — your IP address may be recorded in our security and anti-abuse systems (for example, sign-in and checkout rate-limiting and our administrative audit log) to help protect accounts and prevent fraud.

Our storefront does not use third-party advertising pixels or third-party analytics trackers, and we do not build advertising profiles about you.

We use your information to:

• process, fulfill, and ship your orders, and provide customer support;
• create and manage your account and keep you signed in;
• process payments and refunds through Square;
• send transactional emails — order confirmations, shipping updates, receipts, password resets, and account or security notices;
• protect our store and customers against fraud and abuse, and keep the site secure; and
• meet our legal, tax, and accounting obligations.

If you sign up to receive news, drops, or promotional updates from us, we use your email address to send them, and every such message includes a way to unsubscribe. The transactional messages above are needed to complete your orders and are not promotional.

We share personal information only with the service providers that help us operate the store, and only as needed for them to perform their service:

• Square — to process payments for online and in-store purchases.
• Our website host and database provider — to run the site and store our data securely.
• Our email provider — to deliver the transactional emails described above.
• Shipping carriers — to deliver your orders to you.

We may also disclose information when required to comply with the law or legal process, to protect our rights, property, or safety (or that of our customers), or in connection with a business transfer such as a merger or sale. The card images and product data shown on our site come from third-party trading-card databases that receive no customer personal information — only the name of the card.

We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising.

Payments are processed by Square, Inc. When you enter your card details at checkout, they are sent directly to Square and converted into a secure token — your full card number and security code never reach our servers. In-store purchases are processed on Square point-of-sale hardware. Square handles your payment information under its own privacy practices, which you can read in the Square Privacy Notice. If you save a card, we store only Square's token plus limited display details (such as the card brand, last four digits, and expiration date) so we can show you which card is on file. If you're due a refund, we process it through Square back to your original payment method; how long it takes to appear depends on your bank or card issuer.

We use a small number of first-party, strictly necessary cookies — for example, to keep you signed in and to remember the contents of your shopping cart. These are required for the site to work. Your signed-in session lasts up to 7 days, and you can clear these cookies at any time in your browser settings. We do notuse third-party advertising or analytics cookies, and we do not track you across other websites. Because we do not sell or share your information or run ad trackers, there is no "Do Not Sell or Share My Personal Information" choice for us to offer.

We protect your information using industry-standard safeguards, including encryption in transit (HTTPS/TLS), hashed (not plain-text) passwords, parameterized database queries, access controls, and rate-limiting to deter abuse. Payment-card security is handled by Square. No method of transmitting or storing data is completely secure, so while we work hard to protect your information and limit who can access it, we cannot guarantee absolute security.

We keep personal information for as long as your account is active or as needed to provide our services. We retain order and transaction records for as long as necessary to fulfill orders and to meet our tax, accounting, legal, and fraud-prevention obligations. When information is no longer needed, we delete or de-identify it. You may ask us to close your account or delete your information (see Your Privacy Rights & Choices); we may keep certain records where the law requires.

Manage your account.When you're signed in, you can view your order history, change your password, and manage your saved addresses and payment methods at any time.

Access, correct, or delete. To access a copy of your personal information, correct it, or request deletion or account closure, email us at support@duelistonly.com. We'll verify your request against your account before acting on it and respond within a reasonable time, typically within 45 days. If you close your account or remove a saved card, we delete the stored payment token from our records. Some information may be retained where required for legal, tax, or fraud-prevention purposes.

U.S. state privacy rights (including California). Depending on where you live, you may have the right to know what personal information we collect, to access or receive a copy of it, to correct or delete it, and not to be treated differently for exercising these rights. We honor these requests through the same email above. As noted, we do not sell or share your personal information, so there is nothing to opt out of in that respect.

Email updates.If you signed up for our email list, you can unsubscribe at any time using the link in any update we send or by contacting us. We'll still send transactional messages needed to complete your orders.

Our store is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, please contact us and we will delete it.

Our site may link to third-party websites and services, such as Square, shipping carriers, or our social media pages. We don't control those sites and aren't responsible for their privacy practices, so we encourage you to review their own policies.

We operate from the United States and store and process information here. Our store is intended for customers in the United States. If you access the site from outside the U.S., please be aware that your information will be processed in the United States, where data-protection laws may differ from those where you live.

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date at the top of this page, and for material changes we'll provide a more prominent notice. Please review this page periodically.

If you have questions about this policy or your personal information, or you'd like to make a request, contact us at support@duelistonly.com or write to us at Duelistonly, Austin, Texas.