Legal

Privacy Policy

Effective September 26, 2026

What we collect on this website and in the platform, what it is used for, who else handles it, and how to reach us about it. Questions go to sales@gamestoreos.com.

1. Who this covers

This policy covers two things: this website (gamestoreos.com), and the GameStoreOS platform that hobby game stores use to run their website, events, store credit and other records. "We", "us" and "our" mean GameStoreOS.

If you are a customer of a game store that uses GameStoreOS, the store is responsible for the information it collects about you, and its own privacy notice applies. We process that information on the store’s behalf, as described in section 3.

2. This website

The only information this website collects is what you type into the early-access form: your name, email address, store name, what you run today, and anything you write in the message. We use it to reply to you and set up a call. It is not added to a newsletter or a marketing list.

The form is delivered to us by Formspree, which stores the submission so we can read it. This website does not use advertising cookies or tracking pixels.

3. The platform

When a store uses GameStoreOS, the platform holds the store’s own records: staff accounts, the store’s website content, events and registrations, the store-credit ledger, consignors and payouts, pre-orders, bounties, announcements, email lists and the audit log. The store owns this data. We host and process it only to provide the service, and we do not sell it or use it to advertise to anyone.

Customers of a store may create an account on the store’s website or portal to sign up for events, check store credit, follow pre-orders and manage what email they receive. Sign-in is handled by an authentication provider, which verifies the email address so that two customers are never linked on a guess. A customer can link their Discord account to their record only by completing a one-time code we send to their email.

Email a store sends through the platform (announcements, event and pre-order notices, bounty updates) leaves from the store’s own mail server, and every marketing email carries an unsubscribe link that works without signing in.

Where a store connects a storefront or point-of-sale system, we read orders and, if the store chooses, its customer list from that system. We do not read the store’s catalogue or write to its order history. The store’s help pages list exactly what each integration reads and writes.

A store’s owner can export a complete copy of everything the platform holds for the store at any time, and can ask us to delete it when the store leaves.

4. Who else handles the data

We use a small number of service providers to run the platform, each only for the purpose named: Google Cloud (hosting), Supabase (the database), Firebase (sign-in), Vercel (this website and store websites), Formspree (this website’s contact form), and the storefront, Discord and email services a store chooses to connect. Each processes data under its own terms and only as needed to provide its part of the service.

We do not share personal information with anyone else except where the law requires it, or to protect the platform and its users from abuse.

5. How long we keep it

Form submissions are kept for as long as we are in conversation with you, and deleted when that ends or when you ask.

Platform data is kept for as long as the store uses the service. When a store leaves, its data is made available for export for a reasonable period and then deleted, except where we must keep a record for legal or accounting reasons. The audit log is kept for the life of the store because it is the record a store relies on to answer a dispute.

6. Security

Data is encrypted in transit and at rest. Access inside the platform is limited by role, every change is written to an audit log, and secrets are never stored in source code. No system is perfectly secure, and we will tell affected stores promptly if we learn of a breach involving their data.

7. Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. If the information belongs to a store’s records, we will refer the request to the store, since the store decides what happens to its own records, and help it respond.

Requests go to sales@gamestoreos.com.

8. Changes

When this policy changes, the effective date above changes with it. A change that affects how a store’s data is handled will be announced to store owners before it takes effect.