Privacy Policy

Last updated: July 2026. The German Datenschutzerklärung is the authoritative version.

1. Controller

Matthew Pyle, PhantomForge, Nelkenstr. 16, 91207 Lauf an der Pegnitz, Germany — forge@phantomforge.co

2. Hosting

This site is hosted by Vercel Inc. (USA). Technically necessary access data (IP address, timestamp, requested page, browser) is processed in server logs to run the site securely (Art. 6(1)(f) GDPR). Transfers to the USA are based on EU Standard Contractual Clauses.

3. Orders

To fulfill your order we process your name, address, email, phone number and order details (Art. 6(1)(b) GDPR). Recipients: Stripe (payment — we never see full card details), DHL / EasyPost (shipping), and Drip Apps Inc. (“Build a Gang Sheet” — your uploaded artwork is processed there to produce the print file). Order records are retained as required by German commercial and tax law (up to 10 years).

4. Transactional & marketing email

Order, print and shipping confirmations are sent via Resend Inc. (USA, SCCs). Marketing email (newsletter, abandoned-cart reminders) is sent only with your explicit consent — checkout checkbox or double-opt-in footer signup — and every message contains an unsubscribe link. You can withdraw consent at any time.

5. Cookies & local storage

We use no tracking or advertising cookies and no analytics. Your cart and shipping details live only in your browser (localStorage) until you place an order. Stripe sets technically necessary cookies at checkout for fraud prevention.

6. Your rights

You have the right to access, rectify, erase and restrict your data, to data portability and to object (Art. 15–21 GDPR) — just email forge@phantomforge.co. You may also lodge a complaint with a supervisory authority; ours is the Bavarian Data Protection Authority (BayLDA), Ansbach, Germany.