Privacy Policy

Our Approach to Privacy

At Pando Market, we respect your privacy and strive to minimize data collection. We do not sell your personal information to advertisers or data brokers, and we keep tracking to the minimum needed to run our business and improve your experience.

Information We Collect

Information You Provide

When you make a purchase, we collect your name, email address, shipping address, and payment information. Payment details are processed securely by Stripe and are never stored on our servers.

Automatic Information

We use PostHog for product analytics and error tracking, and Microsoft Clarity for behavioral analytics such as heatmaps and session replay. We may collect basic technical information like browser type and device type to improve our website, and PostHog and Microsoft Clarity may use cookies or local storage to recognize you across visits.

Session replay runs with masking: Microsoft Clarity is set to mask all text and form inputs on every page, so names, addresses, email addresses and anything you type are hidden in recordings. Session replay does not start at all if your browser sends a Do Not Track or Global Privacy Control signal.

Server-side analytics events for orders and rewards identify you by an internal account ID or, for guest checkouts, by a one-way hash of your email address. They do not include your name or email address, and email addresses are removed from error reports before they are sent to PostHog.

Advertising and Measurement

We do not currently run advertising pixels or ad-network tags on this site. If that changes, we will update this policy first. Microsoft Clarity can share data with Microsoft Advertising when that integration is switched on. We keep it off and set Clarity to deny ad storage.

Other Information We Collect

• IP address. We record the IP address an order is placed from and keep it with the order. We use it to detect and prevent fraud and abuse, including a blocklist of addresses we refuse orders from, and our staff can see the addresses used across a customer's orders. We remove the IP address from the orders of an account you delete 120 days after the order date. Until then, and for other orders, it stays with the order record.
• Automated fraud screening. When an order is placed, an automated check compares its shipping address, email address, total and order history with our other orders. It can hold an order for review by our staff before it ships.
• Phone number. You can add an optional phone number to your account profile. We store it with your account.
• Google sign-in. If you sign in with Google, Google shares your email address, name and profile picture with our login system, which stores them with your sign-in record. We create your account from your email address.
• Quiz responses. If you take our quiz and give your email address, we store your answers with your email address. We email you a confirmation link first and add you to our newsletter list only after you confirm.
• Arcade. If you play in our Arcade, we store your handle, avatar, friends list, saved decks and a record of your matches. Your handle is visible to other players.

How We Use Your Information

We use your information to:

• Process and fulfill your orders
• Communicate about your purchases
• Invite you to review your experience after your order is delivered
• Provide customer support
• Understand how visitors use our site
• Improve our website and services
• Comply with legal obligations

Third-Party Services

We work with trusted third-party services to operate our business:

• Stripe – Processes payments securely
• Shippo – Handles shipping and delivery
• Resend – Sends our transactional emails and our marketing newsletter, and holds our newsletter subscriber list
• PostHog – Provides product analytics and error tracking
• Railway and Cloudflare – Railway hosts our website and order systems, and Cloudflare sits in front of them to deliver pages and filter abusive traffic. Both handle your requests, including your IP address, as they pass through.
• Google – Provides sign-in with Google. Our order emails also include a link to leave us a review on Google. Following that link takes you to Google, which handles anything you give it under its own privacy policy.
• Neon – Hosts the database that stores our store, account, order and Arcade records.
• Medusa Cloud – Hosts our store backend, which handles products, carts, customers and orders.
• Trustpilot – Collects and hosts reviews of our business. We embed a Trustpilot widget on our website, which loads content from Trustpilot and may set its own cookies. After your order is delivered, we send Trustpilot your name, email address, and order number so they can invite you to write a review. We do not send them your shipping address, payment details, or what you ordered, and we never offer anything in exchange for a review. You can decline the invitation, and Trustpilot lets you manage or delete a review you have written. See the Trustpilot Privacy Policy for more details.
• Microsoft Clarity – Shows us how visitors use our website through behavioral metrics, heatmaps, and masked session replay, which we use to improve the site and spot fraud and security problems. Clarity uses first-party cookies. We do not use it for advertising. See the Microsoft Privacy Statement for more details.

Each of these services has its own privacy policy, and we encourage you to review them.

Cookies and Tracking Technologies

We use analytics and session replay on this website. PostHog and Microsoft Clarity may set cookies or use local storage on your device to recognize you across visits, record the pages you view and how you interact with them, and replay your sessions. If your browser sends a Do Not Track or Global Privacy Control signal, we do not start either tool, so no browser analytics or session replay runs for your visit. If you place an order or receive an email from us, our servers still keep records of those events. You can manage cookie preferences through your browser settings at any time.

Data Security

We implement industry-standard security measures to protect your information. All data transmission is encrypted using SSL/TLS. Payment information is handled by PCI-compliant processors and never stored on our servers.

Your Rights

You have the right to access, correct, or delete your personal information. You may opt out of marketing communications at any time. To exercise these rights, email [email protected].

Account deletion and records we keep. You can delete your account at any time from Account, Settings, Delete account. Deleting your account signs you out permanently, removes your name, email address, phone number, saved addresses and marketing subscription from our systems and from the email, payment and PostHog analytics services we use, and forfeits any unspent rewards points. We do not currently delete masked Microsoft Clarity session recordings when you delete your account. Any store credit must be spent, or refunded by emailing [email protected], before you can delete your account. We keep a record of each order we shipped to you for as long as tax and accounting law requires, in a de-identified form: the order number, date, items, amounts, tax and the shipping city, state and ZIP code. We remove your name, email address, phone number and street address from each order 120 days after the order date, so we can still handle returns, refunds and card disputes until then. Payment processors and shipping carriers may keep their own transaction records as the law requires.

Arcade data. Deleting your account also erases your arcade profile, handle, avatar, friends list and saved decks. Matches you already played stay in your opponents' histories, with your name replaced by “Deleted player”.

To request a copy of the personal information we hold about you, email [email protected].

Guests and newsletter subscribers. You do not need an account to ask for access or deletion. If you checked out as a guest or only subscribed to our newsletter, email [email protected] from the address you used and we will find your records. We reply within 45 days.

California Privacy Rights (CalOPPA/CCPA)

California residents have additional rights under CalOPPA and CCPA. You have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell your personal information.

Do Not Track Disclosure: We honor Do Not Track and Global Privacy Control signals for our own analytics and session replay: when your browser sends either signal, we do not start PostHog or Microsoft Clarity. The Trustpilot reviews widget is not loaded when either signal is set, so it does not run for your visit.

Children's Privacy

Our website, accounts and Arcade are for people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18, including children under 13. If you believe a child has given us personal information or opened an account, email [email protected]. When we confirm an account belongs to someone under 18, we delete it and the information tied to it.

Do Not Sell or Share My Personal Information

We do not sell your personal information. We also do not share it for cross-context behavioral advertising, which means giving it to others so they can target ads to you across other sites. We run no advertising pixels today.

We honor the Global Privacy Control signal. When your browser sends it, we do not start PostHog or Microsoft Clarity. We configure Clarity with ad storage denied and do not link it to a Microsoft Advertising account.

How Long We Keep Data

• Analytics events and session replays. PostHog events are kept for the retention period we set in our PostHog project, and Microsoft Clarity recordings for Clarity's default period. We review these settings regularly. To ask us about a specific record, email [email protected].
• Newsletter subscribers. We use double opt-in: we email you a confirmation link and subscribe you only after you click it. We keep your subscription for as long as you stay subscribed. After you unsubscribe, we keep a suppression record, which is just your email address and the date, so we do not email you again. If you sign up but never confirm your email address, we delete the signup after 30 days.
• Arcade data. We keep your Arcade profile and match records until you delete your account. Arcade error logs sent to PostHog follow the PostHog retention above.

Arcade Error Reporting

When something breaks in the Arcade, it sends an error or log event to PostHog so we can fix it. The event uses a random anonymous ID, not your name or email, and the page address is sent without its query string. The Arcade honors Do Not Track and Global Privacy Control: if your browser sends either signal, it sends nothing.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last Updated” date.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

© 2026 Pando Market. All rights reserved.