Privacy policy

Who we are

Oscar Mischler runs this store and is responsible for your data. Contact: see the contact page.

What we collect

• Order data: name, address, email, phone (if given), items bought.
• Waitlist and newsletter: email, country, the universe you chose, quiz result if you save it.
• Browsing data: pages viewed, device type, approximate location, through cookies and similar tools, only after you accept them where the law requires it.

Why

To deliver your order, answer you, send the emails you signed up for, measure what works on the site and prevent fraud.

Who receives it

Our e-commerce platform (Shopify), our payment provider (Stripe), our print and shipping partner (Printful), our e-mail provider (Resend), carriers, and analytics and advertising tools, including Meta (Facebook, Instagram) and TikTok, which receive data about your visits and purchases through their pixels, only after you accept cookies where the law requires it. They process data on our instructions or under their own legal duties. Data may be transferred outside your country with appropriate safeguards.

How long

Order data is kept as long as accounting law requires. Waitlist and newsletter data is kept until you unsubscribe, and at most 24 months after you sign up or last interact with our e-mails.

Your rights

You can ask to access, correct, delete or export your data, to object to marketing and to withdraw consent at any time. Write to us through the contact page. You may also complain to your data protection authority.

Notification sign-ups and age check

When you ask to be notified about a product not yet authorised in your country, we record your e-mail, the country you chose and the product in our e-commerce platform (Shopify). We use them for one thing only: telling you if its sale becomes possible there. This is not an order, and no payment is asked for. We keep this data until that message, at most 24 months after you sign up, and never beyond your unsubscription: one click on the link in every e-mail, or a message from the contact page, is enough. When you place an order, the card payment is made on a page hosted by Stripe: we only receive the payment status, never your card number.

Your answer to the age check (and, in the United States, the state you chose) stays in your browser. We do not receive it and we never ask for an ID document.

Prospecting and partners

We sometimes write to shops, media, creators and partners to propose a collaboration or a trade order. We use only a professional address they have published themselves (their website, a public directory), we write one individual message at a time, at most 20 a day in total, and every message says who we are and how to stop receiving them. Our legal basis is legitimate interest (a professional offer to a professional). We keep the name, the address and the exchange for at most 24 months after the last contact, and we delete them, noting the address on a do-not-contact list, as soon as you ask through the contact page.

E-mails

Every marketing email has an unsubscribe link. We do not send marketing text messages.