Store/Privacy

Legal

Privacy Policy

Last updated 1 February 2026. Plain language, and it is the version that applies — there is no second document behind it.

What we collect

Only what running a shop requires: the email address you register with, your order history, the country we need for VAT, and server logs. Logs hold an IP address, a timestamp, the path requested and the user agent. Nothing else about you is collected anywhere on this site.

What we do not collect

No advertising identifiers. No third-party analytics. No social widgets, no embedded fonts, no pixel from anybody. Every asset on this page is served from this domain, which you can verify in your browser's network panel in about ten seconds.

How long we keep it

Server logs are deleted after 30 days. Order records are kept for seven years because tax law in Estonia requires it. Everything else goes with your account, immediately, when you delete it from Account → Privacy.

Who else sees it

Our payment processor, for the payment. Our email provider, to deliver the receipt. Our hosting provider, because the data sits on their disks. Nobody else, and none of them may use it for their own purposes. We have never sold customer data and will not.

Your rights

Access, correction, deletion, portability and objection, under the GDPR. Write to privacy@games.yaboost.org and we answer within 30 days, usually within two working days. You may also complain to your national data protection authority.

Cookies

Two, both strictly necessary, neither requiring a banner: a session cookie so the site knows you are signed in, and a cart cookie so the basket survives a reload. There is no tracking cookie to reject, which is why you have not been asked to reject one.

Your theme preference is stored in localStorage on your own device and never sent to us.

Children

The store is not intended for children under 16. We do not knowingly create accounts for them, and we delete any we find out about.

Changes to this policy

Material changes are announced by email to registered customers thirty days in advance. The previous version stays linked here for a year.