Privacy

What I collect

Your email and shipping address, because I can't send you a hat without them. The text and design you chose, because that's the product.

There are no accounts, no passwords and no marketing list. I'm not building a profile of you.

Card details

I never see them. Payment is handled inside Helcim's own form — your card number goes to them, not to this site, and it isn't stored here in any form.

Play counts and likes

Each game shows how many times it's been played and how many likes it has. Those are two numbers per game and nothing else — no record of who played or who liked, because that isn't sent. Whether you've liked something is remembered in your own browser, not on my server.

To stop one person refreshing a page a thousand times and inventing plays, your IP address is scrambled into a short code that's kept for half an hour and then deletes itself. The address itself is never written down, and the code can't be turned back into it.

Notifications, if you turn them on

If you switch on notifications for new games, your browser gives me an anonymous address to deliver to — no name, no email, nothing that says who you are. That's the only thing stored, and it's the only thing it's used for.

I send them by hand, when there's a new game or something genuinely worth interrupting you for. Never marketing. Turn them off with the same button you turned them on with, or in your browser settings, and the address is deleted.

Who else gets your data

Your name and address go to the print-on-demand supplier who makes and ships the order, because otherwise it can't reach you. Your email goes to them too, so they can send tracking.

That's it. Nothing is sold, rented, or handed to advertisers.

Analytics

Aggregate page-visit numbers, so I know whether anyone's actually here.

I also use Microsoft Clarity, which records anonymised session replays and heatmaps — roughly, where people click and where they give up. It's how I find out that a step in the customizer is confusing. It masks what you type into form fields, and I use it to fix the site, not to identify you.

Ads on the games pages come from Google AdSense, which sets its own cookies and may use them to choose what it shows you. That is Google's system, not mine — I never see who you are, and nothing you type into the shop is shared with it. If you're in the EU or UK you'll get a consent prompt first, and you can say no.

Getting it deleted

Email shiccupagent@gmail.com and I'll delete what I can. Order records tied to a real transaction have to be kept for tax purposes, and I'll say so rather than pretend otherwise.