Privacy Policy

Who is responsible

The data controller — the person responsible for the personal data described here — is:

Zack Sauce, an individual based in Norway Email: zacksauceofficial@gmail.com

What is stored

Only what a store needs to work and to remember what you own.

• Your account id and email address, so you can sign in and your editions attach to you.
• Your purchases: what you bought, the edition number, the amount and currency, and the payment reference.
• Which version of the terms you accepted, and when you accepted it.
• Your email address, if you ask to be kept up to date — and only for that.
• For the Hall of Holders only, and only if you switch it on: your username, and the date of your first purchase.

The Hall of Holders

The Hall of Holders is a public page listing the people who own an edition, in the order they arrived. Being on it is a choice, it is off until you switch it on, and switching it off takes the name off the page.

What it publishes is your username, the date you first bought something, how many editions you hold in each run, and your arrival position. It never publishes your email address, your real name, what you paid, or which releases you own. The number beside a name is arrival order, not an edition number.

Your name is read from your account when you turn the listing on, so nobody can put a name on the wall that is not their own. If you change your username and want the page to match, switch the listing off and on again.

The mailing list

If you ask to stay updated, the address you give is kept on the server so that release news can actually be sent to it. If you give it while signed in, it is attached to your account instead, along with your username, so the list can tell who already owns something.

It is used for release news and nothing else. There is no newsletter platform, no tracking pixel and no third party holding a copy — the list is a file, and it is exported by hand when there is something to say.

Untick the box in your account and the address is deleted, not flagged. If you asked to stay updated without an account, write to zacksauceofficial@gmail.com and it is removed the same way.

What is not stored

Card numbers, expiry dates and security codes never reach this site. Stripe collects them directly and passes back only a payment reference.

There is no analytics, no tracking pixel, no advertising technology and no session recording on this site. If that ever changes, this page will say so before it does.

Who else handles it

Three providers process data on my behalf, each for one job:

• Clerk — signs you in and holds your account identity.
• Stripe — takes the payment and calculates tax.
• Cloudflare — hosts the site and stores the ownership records.

Why it is allowed

Purchases are processed because they’re needed to carry out the agreement between us. Marketing email is only ever sent with your consent, and you can withdraw that at any time. Keeping the store secure and free of fraud rests on a legitimate interest in it actually working.

How long it is kept

Purchase and accounting records are kept for five years, because Norwegian bookkeeping rules require it. Account details are kept until you ask for them to be deleted. A marketing preference lasts until you opt out.

Cookies

Only cookies that the site needs in order to function are set: Clerk’s, to keep you signed in, and Stripe’s, to take a payment. There is no cookie banner because there is nothing optional to consent to. If analytics or advertising is ever added, that changes, and this page will say so first.

Your rights

You can ask for a copy of your data, have it corrected, have it deleted, or have it sent to you in a portable format. You can object to processing that rests on legitimate interest, and you can withdraw marketing consent at any point.

Ask at zacksauceofficial@gmail.com, and you’ll get an answer within a month.

Data outside Norway

The providers above operate globally, so data may be handled outside Norway and the EEA. Where that happens it’s covered by the transfer safeguards those providers maintain for exactly this.

Complaining

If you think your data has been handled badly, tell me first — I’d rather fix it. You also have the right to complain to Datatilsynet, the Norwegian Data Protection Authority.