1. What we collect

We only collect information you knowingly give us so we can ship your order or reply to your questions. This includes name, shipping address, email, phone (optional), and payment tokens returned by our processor (Stripe). We never see your full card number. If you subscribe to our journal we store your email and the date you opted in.

2. Age verification

Access to Ram Shack requires confirming you are 18 years or older (or 21 where applicable). We store a session flag confirming your attestation — we do not retain identity documents.

3. Cookies and analytics

We use first-party cookies to keep you signed in and to remember your cart. Aggregate analytics (page views, referral source, device type) may be collected in de-identified form. We do not sell your data to third parties, ever.

4. Discreet shipping

All orders ship in plain packaging with a neutral return name. Your purchase history is visible only to you (via your account) and to authorized Ram Shack staff who service orders. Suppliers who drop-ship on our behalf see only the shipping address and product SKU.

5. Third parties

We share the minimum data required with these processors:

• Stripe — payment processing (PCI-DSS Level 1)
• Resend / SMTP provider — order + newsletter emails
• Contracted suppliers — drop-shipping (address + SKU only)
• Emergent-managed Google Auth — optional social login

6. Your rights

You may request a copy of every piece of information we hold about you, or ask us to delete your account and all personal data, at any time. Write to privacy@ramshack.toys and we will confirm within 30 days.

7. Security

Traffic is encrypted with TLS. Passwords are hashed with bcrypt. Payment card data never touches our servers — Stripe tokenizes at the browser. We audit access logs monthly.

8. Contact

Ram Shack · privacy@ramshack.toys