Store policies
Privacy policy
Last updated October 15, 2026
This policy explains what personal information the Ultra Kingdoms Store collects, why, who we share it with and the choices you have. It applies to this store only; the Ultra Kingdoms games and other websites have their own policies.
What we collect
- Order details: your name, email address, shipping address, phone number if you give one, what you bought and how much you paid.
- Payment details: for PayPal, the PayPal transaction reference (PayPal handles your card and account details, and we never see them). For crypto, the wallet address and transaction you paid from, which are public on the blockchain.
- Account details if you create an account: your name, email address and an encrypted (hashed) version of your password. We can't see your password.
- Gift card details: the recipient's name, email address and your message if you send a gift card to someone.
- Messages you send us through the order help form or by email.
- Technical data: your IP address and browser details, which we use briefly to keep accounts secure and to stop abuse such as repeated sign-in attempts.
How we use it
- To take payment, produce and deliver your order, and send you order and shipping emails.
- To issue and deliver gift cards and keep track of their balances.
- To run your account, including sign-in alerts and password resets.
- To answer your questions and handle returns or refunds.
- To prevent fraud and keep the store secure, and to meet our legal and accounting obligations.
We don't sell your personal information, and we don't send marketing emails unless you've asked us to.
Who we share it with
We only share what each service needs to do its job:
- Printify and its print providers and carriers, which produce and ship your order (name, address, phone, email and items).
- PayPal, which processes PayPal and card payments.
- Resend, which delivers our emails.
- Vercel and Upstash, which host the store and its database.
- Authorities, where the law requires us to.
Some of these providers are based in the United States, so your information may be processed there.
Cookies and storage
We use one essential cookie to keep you signed in, and your browser's local storage to remember your cart. We don't use advertising or tracking cookies. Our payment providers may set their own cookies when you use them.
How long we keep it
We keep order records for as long as we need them for tax and accounting, normally up to 7 years. Account details are kept until you ask us to close your account. Enquiries are kept for up to 2 years. Blockchain transactions are permanent and can't be deleted by anyone.
Your choices and rights
You can ask us for a copy of your personal information, to correct it, or to delete your account and the information we don't need to keep by law. Depending on where you live (for example the EU, UK or California) you may have further rights, including to object to how we use your information or to complain to your local data protection authority. Email admin@cayc.io and we'll respond within 30 days.
Security
Data is sent over encrypted connections, passwords are stored hashed, and access to order data is limited to the people who run the store. No system is perfectly secure, so please use a password you don't use anywhere else.
Children
The store isn't aimed at children under 13, and we don't knowingly collect their information.
Changes
If we change this policy we'll update the date at the top. Significant changes will be highlighted on the store.
Contact
Questions about your privacy? Email admin@cayc.io or use the contact form.