Core Principle: We do not collect, store, or retain any personally identifiable information (PII). All customer data is handled exclusively by our payment processor (PayPal) and fulfillment partner (Printful).
Introduction
Welcome to UserID10T's Arcade ("we," "us," or "our"). We are committed to protecting your privacy and being transparent about our data practices. This Privacy Policy explains how we handle information when you visit our website and purchase merchandise.
What We Do NOT Collect
We never collect, store, or have access to:
- Your name
- Your email address
- Your shipping address
- Your billing address
- Your payment information (credit card, PayPal account details)
- Your IP address (beyond automatic server logs with <7 day retention)
- Your device information
- Your browsing history
- Any other personally identifiable information
What We DO Collect (Minimal, Non-Personal)
Order References (Anonymous)
When you complete a purchase, we store only:
- Order Reference: A random identifier (e.g.,
ord_a3f2b9d14c5e6a7b8c9d0e1f2a3b4c5d) - PayPal Order ID: External reference provided by PayPal
- Printful Order ID: External reference provided by Printful
- Product SKUs: Which products were ordered (e.g.,
SHIRT-001) - Order Status: Pending, fulfilled, shipped, etc.
- Timestamps: When the order was created and updated
Important: These records contain NO personal information. We cannot identify who placed an order based on this data alone.
Technical Data (Automatic, Minimal)
- Server Logs: Hosting provider logs are used for security and operational purposes, then rotated and deleted after 7 days. We do not manually archive logs or use them for marketing. For provider details, see Vercel Privacy Policy and Cloudflare Privacy Policy.
- Essential Cookies: Minimal session cookies for checkout functionality only (no tracking). See our Cookie Notice for details.
How Data Flows Through Our System
Step 1: Browsing Our Site
- You view products on our static website (hosted on a CDN)
- No cookies are set during browsing
- No analytics track your session
Step 2: Checkout Process
When you decide to purchase:
- You click "Checkout"
- Our serverless API creates a PayPal order (without accessing your personal info)
- You are redirected to PayPal's secure checkout page
- You enter your payment and shipping information directly to PayPal (we never see this data)
Step 3: Payment Processing
- PayPal processes your payment
- PayPal stores your billing information
- PayPal sends us a webhook notification: "Payment completed for order [external-id]"
- We verify the webhook signature for security
Step 4: Fulfillment
- Our system forwards the order details (including shipping address) directly from PayPal to Printful
- We do not store the shipping address — it passes through our system in-memory only
- Printful receives the shipping info and fulfills your order
- Printful stores your shipping address for fulfillment and shipping purposes
Processor Note: Printful acts as a fulfillment data processor for shipping and delivery. Their retention, deletion, and processor terms are governed by their policies: Printful Privacy Policy.
Step 5: Order Tracking
- You receive your order reference (random identifier)
- You can check order status using this reference (no login required)
- Status updates come from Printful via webhooks (we update status only, no PII)
Order Status Lookup
Order tracking is available at /order-status.html using your order reference only (no account required).
Returned fields: order reference, item count, SKU summary, order amount, payment/fulfillment status, and status event timestamps.
Never returned: name, email, shipping address, billing address, payment method, or other personally identifiable information.
Embedded Content
Our site may include embedded Twitch players and YouTube videos. When you interact with embedded content, those providers may set cookies according to their own privacy policies.
Third-Party Services (Data Processors)
PayPal (Payment Processor)
- What they collect: Name, email, billing address, payment information
- Purpose: Process payments securely
- Their policy: PayPal Privacy Policy
Printful (Fulfillment Partner)
- What they collect: Name, shipping address, order details
- Purpose: Print and ship your merchandise
- Their policy: Printful Privacy Policy
Vercel/Cloudflare (Hosting)
- What they collect: Basic server logs (IP addresses, request times) with 7-day retention
- Purpose: Host our website and API
Your Rights (GDPR & CCPA)
Even though we don't store your personal information, you have rights under data protection laws:
Right to Access
You can request a copy of order data associated with your order reference. Contact [email protected] with your order reference. We aim to respond within 30 calendar days and can provide machine-readable output for eligible requests.
Right to Deletion
You can request deletion of your order record. Note: We cannot delete data held by PayPal or Printful—you must contact them directly.
Right to Data Portability
We can provide your order status data in a machine-readable format upon request.
Right to Object
You can object to data processing. Since we process minimal data for contract fulfillment, this may prevent us from completing your order.
Data Retention
- Order References: Retained for 48 hours by default, then automatically deleted (server configuration can extend retention up to 90 days)
- Server Logs: Retained for 7 days, then automatically deleted
- Session Cookies: Expire when you close your browser
Security
We implement the following security measures:
- HTTPS: All connections are encrypted with SSL/TLS
- Webhook Verification: All incoming webhooks are cryptographically verified
- Environment Variables: Secrets are encrypted and never exposed
- Rate Limiting: Prevents abuse and DDoS attacks
Children's Privacy
Our services are intended for adults 18 and older. Minors may browse content with parent/guardian supervision, but purchases must be completed by an adult. If you believe a minor completed a purchase without proper authorization, contact us immediately.
International Users
Our services are operated from the United States. If you are accessing from outside the US, your information will be processed in accordance with this Privacy Policy and US law.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated prominently on our website.
Contact Us
If you have questions about this Privacy Policy or our data practices:
- Email: [email protected]
- Website: https://userid10t.com
Summary: We take your privacy seriously. We've designed our system so that we never see or store your personal information. PayPal handles your payment details, Printful handles your shipping info, and we only track anonymous order references. Your data is safe because we don't have it.