Privacy Policy

1. What we collect

• Account data: Discord user ID, display name, and avatar when you sign in via Discord OAuth.
• Order data: your name, email, phone number, and shipping address that you enter at checkout, plus the items you buy and payment status.
• Wishlist & cart: stored in your browser's local storage so the site can remember them between visits.
• Usage data: standard server logs (IP, user agent, pages viewed) used for security and debugging.

2. How we use it

We use the data above to (a) authenticate you, (b) process and fulfill your orders, (c) send order-related communications, (d) prevent fraud and abuse, and (e) improve the Service. We do not sell your personal information to third parties.

3. Third-party services

We share data with these processors strictly to run the store:

• Discord — OAuth login. See Discord's Privacy Policy.
• Neon / PostgreSQL — database hosting for orders and accounts.
• Mayar — payment processor. Mayar handles your payment data directly; we receive only the invoice and payment status.
• Cloudinary — image hosting for product photos you upload via the admin panel.
• Vercel — application hosting and edge network.

4. Cookies & local storage

We use a minimal set of cookies and local-storage entries required for authentication (NextAuth session token) and the cart/wishlist UI. We do not run advertising trackers.

5. Data retention

Order records are kept for as long as we operate the store plus the period required by Indonesian tax and commercial law (currently up to 10 years for invoices). Account data is kept until you ask us to delete it.

6. Your rights

You can request access, correction, or deletion of your personal data by emailing hello@wahlberg.store. We'll respond within 30 days. If you're unsatisfied with our response, you may lodge a complaint with your local data-protection authority.

7. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we'll delete it.

8. Security

We use industry-standard measures (HTTPS, hashed passwords via our auth provider, least-privilege database access) to protect your data. No system is 100% secure — if you spot a vulnerability, please report it responsibly to hello@wahlberg.store.

9. Changes to this policy

We may update this Privacy Policy. The "Last updated" date at the top reflects the latest revision. Material changes will be highlighted on the storefront before they take effect.

10. Contact

Data controller: Valeria Wahlberg. Reach us at hello@wahlberg.store.