Privacy Policy
1. Introduction
ForgeStore is committed to protecting the privacy of Store Owners and players.
2. Data Collected
Store Owners
- Name, email, password (hashed)
- Withdrawal info (PayPal email, crypto address)
- KYC documents required for withdrawals
- IP address and login logs
Players
- In-game username provided at purchase
- Email (optional per store)
- IP address at purchase time (fraud protection)
Note — No card data is stored on our servers. Card payments are processed by Stripe (PCI DSS Level 1).
3. How We Use Data
- Transaction processing and delivery
- Identity verification for withdrawals (KYC)
- Fraud detection and prevention
- Dispute resolution with PayPal and Stripe
- Compliance with legal obligations
4. Data Sharing
ForgeStore does not sell your data. Shared only with:
- Stripe — card payments
- PayPal — payments and disputes
- NowPayments — crypto payments
- Legal authorities upon valid request
5. Retention
- Store Owner data: account lifetime + 5 years
- Transactions: 7 years
- Player data: 2 years after last purchase
- KYC documents: 5 years after last withdrawal
6. Your Rights
In accordance with applicable international data protection regulations, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to portability
- Right to object
Contact: [email protected] — response within 30 days.
7. Cookies
ForgeStore uses only cookies necessary for operation (session, CSRF). No advertising cookies.
8. Security
Measures: TLS encryption, bcrypt, CSRF, audit logs. In case of breach, affected parties will be notified.
9. Minors
ForgeStore is not intended for persons under 18.
ForgeStore
