Privacy Policy

1. Who We Are

Gryphon Collects operates the website gryphoncollects.com. We run live soccer card breaks and sell sports card products. This policy explains what information we collect when you use our site, how we use it, and your rights over it.

Questions? Reach us at gryphoncollects@gmail.com or through our contact page.

2. Information We Collect

Information you provide directly:

• Name and email address when you create an account or sign in
• Shipping address when you purchase a break spot or product
• Payment information processed securely through Stripe (we never store your card number)
• Messages you send us through the contact form
• Email address if you sign up for break notifications

Information collected automatically:

• Browser type, device type, and IP address
• Pages visited and time spent on the site
• Referring URL
• Cookies and local storage used to keep you signed in and remember your cart

3. How We Use Your Information

• To process and fulfill your orders and break purchases
• To send order confirmations and shipping notifications via email
• To notify you about breaks you have opted into
• To manage your account and provide customer support
• To improve our website and prevent fraud
• To comply with legal obligations

We do not sell your personal information to third parties. We do not send marketing emails unless you have specifically opted in.

4. Stripe (Payments)

All payment processing is handled by Stripe, Inc. Your payment card details are entered directly into Stripe's secure forms and are never transmitted to or stored on our servers. Stripe may store your payment information in accordance with their ownPrivacy Policy.

We receive a Stripe Customer ID and limited transaction information (amount, date, last 4 digits of card) in order to process refunds and manage your subscription or billing portal access.

5. Firebase (Account & Data Storage)

We use Google Firebase to manage user authentication and store account data including your order history, claimed break spots, and shipping address. Data is stored on Google's servers and is protected by industry-standard security measures. SeeFirebase's Privacy Policy for more details.

6. Shipping (Shippo)

When you purchase shipping through our site, your name and delivery address are shared with Shippo to generate shipping labels and carrier rate quotes. Shippo transmits this data to the applicable shipping carriers (USPS, UPS, FedEx, etc.) to fulfill delivery. See Shippo's Privacy Policy.

7. Cookies

We use cookies and browser local storage to keep you signed in, maintain your cart between sessions, and understand how the site is used. You can disable cookies in your browser settings, but some features (such as staying signed in) may not work correctly.

8. Data Retention

We retain your account and order information for as long as your account is active and for a reasonable period afterward to comply with legal and business obligations. You may request deletion of your account and associated data at any time by contacting us.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Opt out of marketing communications at any time
• Lodge a complaint with a data protection authority if you believe your rights have been violated

To exercise any of these rights, contact us at gryphoncollects@gmail.com.

10. Children

Our site is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of the site after changes are posted constitutes your acceptance of the updated policy.