Privacy Policy

1. Information We Collect

When you place a pre-order on RTC Arcade we collect the following information:

• Personal identifiers — your first name, last name, and email address
• Order details — the edition and platform you selected
• Payment information — handled entirely by Stripe (see Section 3). We never store your card number, CVV, or billing address on our servers
• Technical data — IP address, browser type, and device information collected automatically by WordPress and standard web server logs

We do not require you to create an account or provide a physical shipping address at the time of pre-order.

2. How We Use Your Information

We use the information we collect solely for the following purposes:

• To process and confirm your pre-order
• To send your order confirmation email and redeem code
• To notify you about your order status, shipping, and release date updates
• To respond to support requests and enquiries
• To detect and prevent fraud
• To comply with applicable legal obligations

We will not use your email address to send marketing emails without your explicit consent.

3. Payment Data & Stripe

All payment processing on RTC Arcade is handled by Stripe, a PCI DSS Level 1 certified payment processor. When you enter your card details on our checkout page:

• Your card data is sent directly from your browser to Stripe's servers using Stripe.js
• Your full card number, expiry date, and CVV never pass through or are stored on our servers
• We receive only a Stripe PaymentIntent ID and a payment status — not your card details
• For pre-orders, your payment is authorized but not captured until your order ships

Stripe's privacy policy is available at stripe.com/privacy.

4. Sharing Your Information

We do not sell, rent, or trade your personal information to any third party. We share your data only in the following limited circumstances:

• Stripe — to process your payment (see Section 3)
• Email service providers — to deliver your order confirmation and redeem code emails
• Law enforcement or regulatory bodies — where required by applicable law or court order
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity under the same privacy obligations

5. Cookies

RTC Arcade uses a minimal set of cookies necessary for the website to function:

• WordPress session cookies — used for security (nonce verification) during checkout
• Stripe cookies — set by Stripe.js for fraud detection and payment processing

We do not use advertising cookies, tracking pixels, or third-party analytics that profile your browsing behaviour. You can disable cookies in your browser settings, though this may prevent the checkout from functioning correctly.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy:

• Order data (name, email, edition, platform, order reference) — retained for 7 years for accounting and legal compliance purposes
• Email correspondence — retained for 2 years
• Server logs — retained for 90 days and then automatically deleted

You may request deletion of your personal data at any time (see Section 7). Note that we may be legally required to retain certain records.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request that we delete your personal data ("right to be forgotten")
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing of your data for certain purposes
• Withdrawal of consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at order@rtcarcade.com with your full name and order reference.

8. Security

We take the security of your personal data seriously. Our measures include:

• HTTPS / SSL encryption on all pages of rtcarcade.com
• Payment data handled exclusively by Stripe's PCI DSS compliant infrastructure
• WordPress security best practices including nonce verification on all AJAX requests
• Regular software updates and access controls on our hosting environment

No method of transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

RTC Arcade is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at order@rtcarcade.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify customers via email. Your continued use of rtcarcade.com after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

• Email: order@rtcarcade.com
• Website: rtcarcade.com
• Response time: We aim to respond to all privacy requests within 5 business days