Information We Collect
Losttloot may collect information you voluntarily provide, including your name, collector username, optional profile picture, email address, phone number, shipping information, item requests, products offered for sale, and communications with Losttloot.
When online checkout is activated, payment information will be processed by Stripe. Losttloot does not intend to store full card numbers or bank account numbers.
How Information Is Used
- To answer questions and item requests
- To review products or collections offered for sale
- To process, fulfill, and support customer orders
- To prevent fraud and protect the website
- To comply with legal and payment processing requirements
Information Sharing
Losttloot may share necessary information with service providers that support payments, hosting, shipping, fraud prevention, email, or other business operations. Losttloot does not sell personal information for money.
Website and Hosting Data
The website host and security providers may process technical information such as IP addresses, browser information, device information, and access logs for security and performance purposes.
Data Retention
Information may be retained for as long as reasonably necessary to provide services, maintain business records, resolve disputes, prevent fraud, or meet legal obligations.
Your Choices
You may contact Losttloot to request access to, correction of, or deletion of information you previously submitted, subject to legal and recordkeeping requirements.
Children
The website is not directed to children under 13, and Losttloot does not knowingly collect personal information from children under 13.
Contact
Privacy questions may be sent to losttloot@gmail.com.
Customer Accounts and Authentication
Losttloot customer accounts may use email and password, Google, or Apple authentication. Account and session records are stored in a private Cloudflare D1 database and are not placed in the public product catalog. Losttloot stores session identifiers, account provider references, verification records, saved shipping addresses, and order history as needed to operate the customer storefront.
Passwords are processed through the authentication system and are not stored as readable text. Google and Apple may process information under their own privacy policies when a customer chooses those sign in options.
Guest checkout is not available. A verified customer account is required before Losttloot creates a Stripe Checkout Session.
Collector Usernames and Profile Pictures
Customers may choose a unique collector username and may change it through their account settings. Losttloot keeps a private username-change history for account integrity, fraud prevention, and customer support. Usernames may be displayed publicly if community profile features are introduced or used by the customer.
Profile pictures are optional. Before upload, the website resizes the selected image and creates a new standardized copy, which removes the original photo metadata. The processed profile picture is stored privately in Cloudflare D1 and is served through the authenticated account system. Customers may replace or remove their profile picture at any time.
AI Customer Support Assistant
Losttloot may provide an AI-powered chat assistant for general product, policy, reservation, bulk-order, and service questions. Messages entered into the assistant may be transmitted to an AI service provider to generate a response.
Do not submit payment card numbers, bank details, passwords, login codes, government identification numbers, health information, or other sensitive personal information through the chat. For order-specific assistance, payment issues, delivery claims, or account changes, contact Losttloot directly at losttloot@gmail.com.
AI-generated responses may contain errors and do not replace the product listing, checkout total, or posted Losttloot policies.
Treasure Hall and Public Collector Profiles
Treasure Hall uses verified completed order records to display purchase activity only when the customer has enabled a public collector profile and chosen to share purchase history. Customers separately control whether purchase amounts, lifetime eligible spending, and Gold Coin balances are visible. Public purchase cards do not display the order date or time.
Public profile links use the customer username while Losttloot keeps the permanent account identifier private. Turning off the public profile hides the customer profile and associated purchase activity from Treasure Hall. Losttloot may retain the underlying private order, consent, fraud-prevention, and audit records as required for business and legal purposes.
Treasure Program, Gold Coins, and Captain's Chest
Losttloot records eligible merchandise spending, verified purchase count, collector rank, Gold Coin balance, Gold Coin ledger entries, chest entitlements, displayed prize pools, secured chest results, inventory locks, and prize claims to operate the Treasure Program and Captain's Chest.
Captain's Chest outcomes are generated and stored on the server. Technical records may include the campaign identifier, opening number, entry method, selected console category, displayed products, inventory version, secured prize category, and claim status. These records are used to prevent duplicate openings, protect inventory, investigate fraud, fulfill prizes, maintain accurate odds, and comply with promotion requirements.
A no-purchase bonus-entry method is available under the posted Captain's Chest rules. Information submitted to claim a physical prize is used only for verification, delivery, tax or legal requirements, fraud prevention, and customer support.