🛒

Privacy Policy

We respect your privacy and only use your data to process your orders and support you. This policy explains what we collect and your rights under the GDPR.

Data controller

26D OÜ, company reg. no. 12258755, Laki 03, Tallinn, Estonia. Contact: support@thelostgames.net.

What we collect

Order information you provide: name, shipping/billing address, email and phone, plus your order history.

We never see or store your card details — payments are handled directly by our payment providers.

Why we use it (legal basis)

  • To process, ship and support your order — performance of a contract.
  • To meet accounting and legal obligations — legal obligation.
  • To reply to your messages — our legitimate interest.

Who we share it with

We share the minimum necessary with providers that help us run the shop: our payment processors (Stripe for cards; NOWPayments for crypto), our email provider (Google Workspace), our hosting provider (servers in the EU/Germany), and the shipping carrier. Some may process data outside the EEA under appropriate safeguards. We never sell your data.

How long we keep it

As long as needed to fulfil your order and to meet legal and tax obligations (invoices are typically kept for several years).

Your rights

You can request access, rectification, erasure, restriction, objection and portability, and withdraw consent at any time by writing to support@thelostgames.net. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

Cookies

See our Cookies Policy for details on the few essential cookies we use.