Privacy
policy.
What we collect, why, who else sees it, and how to make us delete it.
Who we are
Digital DEN is the data controller for personal data collected through digitalden.shop. If you have a question about your data, or want to exercise any of the rights below, contact hello@digitalden.shop.
What we collect
If you create an account
- Email address — to identify you, verify the account and contact you about orders.
- Password — we never see it. It is sent directly to our authentication provider, which stores only a hashed version.
- Account timestamps — when the account was created and last signed in.
Lawful basis: performance of a contract, and our legitimate interest in securing accounts.
If you link Discord
- Your Discord account ID, username and avatar — so we can confirm who you are when handling your order, and to show your picture on your profile.
We do not receive your Discord password, your messages, or the servers you are in. You can disconnect Discord at any time from your profile.
Lawful basis: performance of a contract — orders are handled through Discord.
If you use the cart
Your basket, chosen currency and sign-in session are stored in your own browser using local storage. They are not sent to us, and we cannot see them. Clearing your browser data removes them.
Automatically
Our host records standard server logs — IP address, browser type, pages requested, timestamps — for security and to keep the site running. We do not use analytics, advertising or tracking cookies.
Cookies and consent
This site sets no cookies and runs no analytics or advertising. It uses browser local storage for your cart, currency choice and sign-in session — all functional, none used for tracking.
The banner you see on your first visit is not a cookie notice. It asks about one thing only: whether we may fetch exchange rates from a third party so prices can be shown in your currency. That request reveals your IP address to them. Declining genuinely stops it — prices are then shown in pounds only. You can change your mind by clearing this site's data in your browser.
Typefaces are served from our own domain rather than a font service, so loading a page does not tell anyone else that you visited.
Who else processes your data
These providers process data on our behalf, or receive it as a consequence of you loading the site:
- Supabase — account and authentication data. Hosted in Ireland (EU).
- Cloudflare — hosting, content delivery and server logs.
- Resend — sends verification and account emails. EU region.
- Discord — if you choose to link your Discord account, Discord confirms your identity to us and provides your username and avatar.
- open.er-api.com — exchange rates for the currency selector, and only if you agree to it. Your IP address is visible to them when rates are fetched. Decline and this request is never made.
We do not sell your data, and we do not share it with anyone for marketing.
How long we keep it
- Account data — until you delete your account, then removed within 30 days.
- Order records — six years, the period UK tax rules require business records to be kept.
- Server logs — retained by our host on their standard schedule.
Your rights
Under UK GDPR you can ask us to:
- Give you a copy of the personal data we hold about you
- Correct anything inaccurate
- Delete your data ("right to be forgotten")
- Restrict or object to how we use it
- Transfer it to another provider
Email hello@digitalden.shop and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office, the UK's data protection regulator.
Security
The site is served over HTTPS. Passwords are hashed by our authentication provider and never stored or transmitted by us in readable form. We do not have access to your password.
Your sign-in session is held in your browser's local storage. That is standard for sites of this kind, but it does mean you should sign out on shared or public computers.
Children
This site is not intended for under-16s and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Changes
If we change this policy we will update the date above. Material changes affecting how we use your data will be communicated to account holders by email.