Privacy Policy

Who we are

MiniTrekMOCs (“we”, “us”) operates this shop and the Undefleeted companion game. This policy explains what we collect, why, and how to remove your data.

Shop & account data

• Account: email, display name, and authentication identifiers from Google or email/password sign-in.
• Orders & downloads: order history, purchased items, download entitlements, and (when used) Stripe customer ID. Payment card data is processed by Stripe — we never see or store it.
• Contact & newsletter: name, email, and message body submitted through forms; newsletter status synced with MailerLite.
• Wishlists: products you save to your wishlist while signed in.

Undefleeted data

Undefleeted is a free drafting game. When you play it we collect:

• Captain handle — a public display name derived from your first name (e.g. captain-sam) shown on the leaderboard and on shared run pages.
• Run history — mission picks, score, tier, complications, daily streak, and timestamps. Runs you choose to share via URL are public.
• Anti-cheat signal — a non-identifying browser fingerprint (hashed) used solely to detect the same device submitting multiple daily attempts under different accounts. Flagged runs are demoted to practice and hidden from public leaderboards.
• Gameplay events — aggregate analytics (mission started, completed, shared, etc.) tied to your session ID and, if signed in, your user ID. Personal fields such as email and IP are stripped before storage.

You can permanently delete your Undefleeted handle, runs, streak, and event history at any time from your account page via “Delete my Undefleeted data”. This is irreversible and does not affect your shop account.

Why we collect it

• To fulfill orders, deliver downloads, and provide customer support.
• To run and improve Undefleeted (leaderboards, daily streaks, anti-cheat).
• To send transactional email (order receipts, download links, contact replies) and, with consent, newsletter updates.
• To prevent abuse and comply with legal obligations.

Third parties

We share data only with the providers needed to run the site:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing.
• MailerLite — newsletter delivery (only if you subscribe).
• Google — optional OAuth sign-in and reCAPTCHA on forms.

We do not sell your personal data.

Cookies & local storage

We use first-party cookies and browser local storage for authentication sessions, cart state, and Undefleeted gameplay (session ID, “hide how-to” preference). No third-party advertising cookies are set.

Your rights

You can:

• Access or correct your account info from /account.
• Delete your Undefleeted data from the same page.
• Unsubscribe from newsletter email via the link in any newsletter message.
• Request full deletion of your shop account by contacting us via /contact.

Children

The site is not directed at children under 13. We do not knowingly collect data from them. If you believe a child has submitted personal information, contact us and we'll remove it.

Changes

We'll update this page when our practices change. The “Last updated” date above reflects the most recent revision.

Contact

Questions? Reach us at /contact.