Privacy Policy

Effective date: October 21, 2026   Last updated: October 21, 2026

This Privacy Policy explains how Reframed Insights Consulting LLC, doing business as Cinderlith Gaming (“Cinderlith Gaming,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit our website, create an account, communicate with us, or purchase products.

1. Scope

This policy applies to the Cinderlith Gaming online store and related customer-service communications. It does not control the privacy practices of websites or services operated by others, even when we link to them.

2. Information we collect

Information you provide

  • Identity and contact information: name, email address, telephone number, billing address, shipping address, and account username.
  • Order information: products, card printing, condition, finish, quantity, price, discounts, tax, shipping method, order status, returns, refunds, and customer-service history.
  • Account information: login credentials in protected form, saved preferences, and account activity.
  • Communications: messages, photographs, attachments, and other information you send when requesting support or reporting an order issue.
  • Optional content: reviews, feedback, or other submissions if those features are enabled.

Payment information

Payments are processed by Square. Payment-card details are entered into Square-controlled payment components and are handled under Square’s terms and privacy practices. Cinderlith Gaming does not intend to receive or store complete payment-card numbers or card security codes. We receive transaction identifiers, payment status, amount, fraud or risk signals, and limited payment-method details needed to reconcile an order.

Information collected automatically

Our systems may collect IP address, browser and device type, operating system, referring page, pages viewed, timestamps, cookie identifiers, cart and session activity, login and security events, and diagnostic logs. See our Cookie Policy for more detail.

Information from others

We may receive delivery status from carriers, payment and fraud information from Square, and card-catalog information from data providers such as Scryfall. Card-catalog data is generally product information rather than customer personal information.

3. Why we use personal information

  • Provide the store, accounts, carts, checkout, payments, order confirmations, fulfillment, tracking, returns, refunds, and support.
  • Match inventory to the correct card printing, condition, finish, language, and product listing.
  • Verify transactions, prevent fraud, protect accounts, enforce purchase limits, and secure the website.
  • Maintain business, tax, accounting, warranty, dispute, and compliance records.
  • Diagnose errors, measure reliability, improve products and services, and understand store use.
  • Send transactional and support messages; marketing campaigns are not currently enabled.
  • Comply with law, respond to lawful requests, establish or defend legal claims, and protect customers, the business, and others.

4. How we disclose information

We may disclose information to service providers that perform work for us, including:

  • Payments and fraud: Square and related payment-service providers.
  • Hosting and technology: Microsoft Azure, WordPress/WooCommerce technology, email-delivery providers, database, storage, security, monitoring, and support vendors.
  • Shipping and fulfillment: postal services, carriers, insurers, address-verification services, and fulfillment partners selected for an order.
  • Professional services: accountants, attorneys, insurers, auditors, and consultants subject to appropriate duties.
  • Business changes: prospective or completed financing, merger, acquisition, reorganization, or sale of assets, subject to applicable safeguards.
  • Legal and safety: authorities or other parties when reasonably necessary to comply with law, protect rights or safety, investigate fraud, or enforce agreements.

We do not sell personal information for money. The store does not currently use targeted-advertising or cross-context behavioral-advertising integrations. First-party order attribution is described in our Cookie Policy.

5. Cookies and similar technologies

We use strictly necessary cookies for carts, checkout, account login, security, preferences, and site operation. We may use optional analytics or advertising technologies only if they are listed in the Cookie Policy and enabled in accordance with applicable consent requirements. Browser controls may limit cookies, but blocking necessary cookies can prevent checkout or account features from working.

6. Retention

For now, we retain customer accounts and order, payment-reconciliation, tax, accounting and refund records indefinitely, without a scheduled automatic deletion date. This does not override an applicable deletion request, a legally required deletion deadline, or a mandatory record-retention obligation. Contact us to request account closure or exercise an applicable privacy right.

Support messages and photographs are retained as needed to resolve the request and meet applicable legal, accounting, security and dispute obligations. Our central Azure monitoring workspace currently retains operational logs for 30 days; provider records and incident evidence may follow different periods. Independent recovery backups use a separate 30-day retention policy. Backup retention does not determine how long active customer or accounting records are kept.

We may retain de-identified information that cannot reasonably be linked back to an individual. We will update this policy if our retention practices change.

7. Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or an appeal; to opt out of certain targeted advertising, sales, sharing, or profiling; and to withdraw consent where processing relies on consent. These rights are subject to legal exceptions.

Submit a request to cinderlithgaming+support@gmail.com. State the right you wish to exercise and the email associated with your account or order. We may take proportionate steps to verify identity and authority. Authorized agents may submit requests where allowed by law. We will not discriminate against you for exercising an applicable privacy right.

Global Privacy Control: No targeted-advertising or cross-context-sharing integration is currently enabled on the store. We do not claim a separate automated GPC preference-control implementation. Applicable opt-out requests can be sent to the support address above; any future optional advertising will require updated disclosures and appropriate controls..

8. Security

We use administrative, technical, and physical safeguards designed for the nature of the information we handle, including access controls, multifactor authentication for administrators, encryption in transit, protected secrets, monitoring, backups, and payment processing through Square. No system can guarantee absolute security. Protect your password and contact us promptly if you suspect unauthorized account activity.

9. Children’s privacy

The store is a general-audience retail service and is not directed to children under 13. We do not knowingly collect personal information from a child under 13 without legally required parental consent. If you believe a child provided information improperly, contact us so we can investigate and take appropriate action. Customers who have not reached the age of legal majority should use the store only with a parent or legal guardian.

10. International visitors

The store is operated from the United States. If you access it from another country, your information may be processed in the United States, where privacy laws may differ. Launch shipping is limited to the 50 U.S. states, DC, supported U.S. territories and military addresses. Ordinary international sales and marketing campaigns are not currently offered.

11. Changes to this policy

We may update this policy to reflect operational, legal or technology changes. We will post the revised version and update its date. For material changes to how we use previously collected personal information, we will provide notice and obtain consent when required by law before applying those changes. We will not rely on a silent policy edit to override prior privacy commitments or applicable rights.

12. Contact us

Privacy questions and requests: cinderlithgaming+support@gmail.com
Reframed Insights Consulting LLC, doing business as Cinderlith Gaming
3820 Dave Ward Dr
Suite 1900, PMB 140
Conway, AR 72034-7995
United States