Privacy Policy

Last updated: 7 July 2026

This Privacy Policy explains what personal data MonstrGame (“we”, “us”) collects when you use our online store, why we collect it, how we protect it, and the choices and rights you have. We act as the data controller for the personal data described here.

1. Data we collect

We only collect data that we need to run the store and fulfil your orders:

Account data — your name, email address and an encrypted (hashed) password.
Order data — items purchased, prices, billing details, delivery email and, for hardware, a shipping address.
Loyalty data — points earned and redeemed and the related transactions.
Technical data — IP address, device and browser type, and pages viewed, collected through cookies and similar technologies.

2. How and why we use your data

We process your data on the following legal bases (GDPR Art. 6):

To perform our contract with you — creating your account, processing orders, delivering digital keys and providing support.
For our legitimate interests — securing the store, preventing fraud and improving our services.
With your consent — analytics and marketing cookies, and personalised advertising. You can withdraw consent at any time.
To comply with legal obligations — tax, accounting and consumer-protection law.

3. Cookies and tracking

We use strictly necessary cookies to run the cart, login and checkout. With your consent we also use analytics and marketing cookies, including tools from Google and Meta, to measure traffic and personalise offers. See our Cookie Policy and the on-site cookie settings for details and controls.

4. Sharing with third parties

We never sell your personal data. We share it only with providers that help us operate the store:

Payment providers — to process payments securely.
Email provider (Resend) — to send order confirmations and account emails.
Advertising and analytics partners (Google, Meta) — only where you have given consent, to measure and personalise ads.
Authorities — where required by law.

5. International transfers

Some providers may process data outside your country. Where that happens we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

6. Data retention

We keep account and order data for as long as your account is active and as required by tax and accounting law. Technical and consent data are kept for the periods described in our Cookie Policy, after which they are deleted or anonymised.

7. Your rights

Subject to applicable law, you can:

Access the personal data we hold about you and receive a copy.
Rectify inaccurate data or complete incomplete data.
Erase your data (“right to be forgotten”).
Restrict or object to certain processing, including direct marketing.
Receive your data in a portable format.
Withdraw consent at any time, and lodge a complaint with a supervisory authority.

8. Children

Our store is not directed at children under 16. We do not knowingly collect their personal data. If you believe a child has provided us data, please contact us and we will delete it.

9. Security

Passwords are stored only as salted hashes, connections are encrypted in transit, and access to personal data is limited to what is necessary to operate the store.

10. Changes and contact

We may update this policy and will change the “last updated” date above. For any privacy request or question, contact us at privacy@monstrgame.com.

This document is provided for a demonstration project (MonstrGame). It illustrates the structure of a compliant policy and is not legal advice. A production store should have its policies reviewed by qualified counsel for its jurisdiction.

Loading…