Legal & Data Security

Privacy Policy

Last Updated: February 2026 • Governed under California & US Federal Privacy Laws

At Arcana Vault (operating from San Francisco, California), we hold your personal privacy with the same uncompromising integrity we demand of our mechanical artifacts. This Privacy Policy details how we collect, process, safeguard, and disclose information when you visit arcanavault.shop or acquire goods from our collection.

1. Payment Processing & Stripe Security Standards

We do not collect, store, or process raw credit card numbers, CVV codes, or full banking credentials on our local servers. All payment transactions are executed through Stripe, Inc., a PCI-DSS Level 1 certified payment service provider—the most rigorous security level available in the global payments industry.

Stripe Payment Integration: When submitting payment information, your card data is encrypted using Transport Layer Security (TLS 1.3 with 256-bit encryption) and transmitted directly from your client browser to Stripe’s tokenized vault. Arcana Vault receives only an anonymized payment authorization token, transaction status, and payment method identifier (e.g., Visa ending in 4242).

2. Information We Collect

We collect only the essential information required to fulfill your orders and deliver exceptional customer service:

Contact & Shipping Information: Full name, physical shipping address, billing address, email address, and optional telephone number for carrier tracking alerts.
Order History: Details of the artifacts purchased, transaction amounts, timestamps, and return records.
Technical & Device Information: IP address, browser type, operating system, and anonymous session analytics to optimize site responsiveness.

3. How We Use Your Information

To pack, insure, and dispatch your orders via FedEx, USPS, or DHL.
To transmit automated order receipts, tracking dispatch notifications, and customer support responses.
To detect and prevent fraudulent transactions or security violations.
To send optional Inner Chamber newsletters (you may unsubscribe at any time via a single-click link in every dispatch).

4. Data Sharing & Third-Party Providers

We never sell, rent, or trade your personal information to data brokers or third-party advertisers. We share information strictly with verified service providers necessary to operate our business:

Payment Processors: Stripe, Inc. (secure card processing, Apple Pay, Google Pay).
Shipping Carriers: FedEx Corporation, United States Postal Service (USPS), and DHL Express for physical transit.
Cloud & Security Infrastructure: Secure web servers with DDoS mitigation and SSL/TLS certificate management.

5. Your Rights (CCPA, CPRA & GDPR Compliance)

Under the California Consumer Privacy Act (CCPA) and European GDPR regulations, you maintain the following rights regarding your data:

Right to Know: Request disclosure of the specific categories and pieces of personal information we have collected about you.
Right to Deletion: Request the erasure of your personal data from our operational records, subject to statutory tax and legal retention requirements.
Right to Opt-Out: Opt-out of any marketing communications at any time.
Right to Non-Discrimination: We will never deny goods or alter pricing because you exercised your statutory privacy rights.

6. Cookies & Local Storage

We utilize lightweight local storage and functional cookies strictly to maintain your shopping cart state across browser sessions and ensure secure checkout sessions. We do not employ intrusive tracking pixels.

7. Contact Our Data Protection Officer

For privacy inquiries, data deletion requests, or questions regarding Stripe payment safety:

Arcana Vault Data Protection Office
44644 El Centro Ave, Jacumba, CA 91934
Email: info@arcanavault.shop
Telephone: (619) 274-1496