Privacy Policy

Jester's Gallery is a trading-card and hobby shop in Waterford, Michigan. This policy explains what information our website collects, why, and what we do with it. The short version: we collect only what we need to run the shop — your orders, event sign-ups, and messages — and we never sell your information.

What we collect

When you place an order: your name, email address, phone number, and the items you bought. Every order is picked up in store, so we never ask for a shipping address.

When you pay: payments are handled entirely by Square. Your card number goes directly to Square's secure checkout — it never touches our website, and we never see or store it. Square sends us a payment confirmation and a coded card identifier (not your card number) that we use to enforce per-customer purchase limits on preorder items. Square's handling of your payment details is governed by Square's own privacy policy.

When you register for an event: the name of each person attending, plus the email address and phone number of the person making the booking. Some events ask each player to upload a decklist (a PDF, text, or image file) as part of signing up — we store it securely and only the shop staff running that event can see it. If you sign up at the counter, we may record names only.

When you contact us: your name, email address, and message so we can reply, plus the network (IP) address the message came from, which helps us block spam.

Marketing — only if you ask: at checkout and event registration there's an unchecked box for receiving news and promotions from us. We send marketing email only if you check it, every such email includes a working unsubscribe link, and leaving it unchecked changes nothing about your order.

Cookies: only the ones the site needs to work — keeping your cart and session together and protecting forms from forgery. We use no advertising cookies and no third-party analytics trackers.

What we use it for

• Fulfilling your orders and emailing you when they're ready for pickup
• Running event registrations, waitlists, reminders, and confirmations
• Replying to your messages
• Enforcing per-customer purchase limits and protecting the site from abuse
• Marketing email, only with your consent

Who we share it with

We never sell or rent your information. It's shared only with the services that make the site run: Square (payment processing), Resend (delivers our order and event emails), and CLK Software (builds, hosts, and maintains the site on servers in the United States). Card images in the catalog may load from TCGplayer's image servers — a standard web request from your browser, like any image online. We may also disclose information if the law requires it.

How long we keep it

Order and event records are kept as long as we need them for business, tax, and accounting purposes. If you ask us to delete your information, we'll remove everything we're not legally required to keep.

Your choices

Email us to ask what information we hold about you, correct it, delete it, or withdraw marketing consent. We'll confirm we received your request within two business days.

Children

Our website isn't directed at children under 13, and we don't knowingly collect their information online. Event rosters may include minors' names when a parent or guardian registers a group.

Security

The site runs over an encrypted connection (HTTPS), full card numbers are never stored anywhere on it, and customer information is accessible only to shop staff.

Changes

If this policy changes, we'll post the new version here with a new effective date.