Privacy Policy

1. Introduction

Your privacy matters to us. This policy explains what information The Dragon's Roost LLC collects through this website, how it's used, and the choices you have. It covers the website — not the conversation you have with us standing at the counter. We aim to collect only what we need to run the site and reply to you.

2. Information We Collect

Information you provide

When you contact us through the contact form, we collect:

• Your name
• Your email address
• The subject and message you submit

Information collected automatically

When you use the site, we process:

• Your IP address — used to rate-limit form submissions and prevent abuse. When distributed rate limiting is enabled, the address is reduced to its network prefix (for example, 203.0.113.42 becomes 203.0.113.0) before that prefix is stored temporarily.

That is the whole list. We run no analytics on this site — no usage tracking, no visitor profiling, and no advertising pixels.

3. How We Use Your Information

• To respond to inquiries you send through the contact form
• To protect the site from spam and abuse (rate limiting)
• To operate, secure, and maintain the website
• To comply with legal obligations

We do not sell or trade your personal information, and we never have.

4. Storage and Service Providers

We share your information only with the service providers needed to operate the site, and where we must to comply with the law or protect our rights:

• Email delivery — the name, email address, subject, and message you submit are transmitted through Resend and delivered to our own inbox at thedragonsroostllc@gmail.com.
• Hosting — the site is hosted on Vercel.

These providers may process data in the regions where they operate.

5. Cookies and Local Storage

This site sets no tracking cookies and stores no consent choice, which is why you have never seen a cookie banner here. If we ever add a provider that sets cookies, we will update this policy to say which cookies it sets and how to withdraw consent.

6. Data Retention

• Contact-form messages — these are not written to a database. They arrive in our email inbox and stay there while we answer you and keep a record of the conversation. Ask us to delete yours and we will.
• Rate-limiting records are transient and expire within the rate-limit window (typically minutes to an hour).

7. Data Security

The site is served over HTTPS with strict transport security, and distributed rate-limit records contain only an anonymized IP prefix. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children's Privacy

This website is not directed at children under 13, and we do not knowingly collect personal information from them through it. The only personal information this site collects is what someone types into the contact form. If you believe a child has sent us personal information through this site, contact us and we will delete it.

Younger players are of course welcome in the shop itself — this section is about the website.

9. Third-Party Links

This site links to third-party sites, including our Facebook page and Google Maps for directions. We are not responsible for their privacy practices, and we encourage you to review their policies.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing of your data
• Request data portability
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data-protection authority

11. Changes to This Policy

We may update this privacy policy from time to time. We will post the new policy on this page and update the “Last updated” date above.