1. Who we are
WarFig operates this website and related game, community, and commerce services. For privacy inquiries, contact us at support@warfig.com. Artist-specific submissions may also be governed by separate artist terms shown in The Forge. See our Accessibility Statement for how we support users with disabilities.
2. Information we collect
Depending on how you use WarFig, we may collect:
- Account and profile: email address, display name, username, avatar (including from Google sign-in if you use it), role, and preferences stored in your profile.
- Orders and pledges: billing and shipping details, order history, payment status, tracking information, store credit balance and ledger entries, and pledge records.
- Community and support: War Council posts, comments, and reports; bug reports and messages; event registrations; and similar content you submit.
- Artist submissions (The Forge): submission metadata, uploaded artwork, and related production notes you provide through the artist portal.
- Army and collection data: saved army lists, collection tracker entries, wishlists, and cart contents tied to your account where you are signed in.
- Marketing and consent: newsletter sign-ups, marketing opt-in/opt-out choices, terms acceptance records, and related audit timestamps (including IP address and browser user-agent where logged for consent events).
- Technical data: approximate usage analytics, performance metrics, IP address (for security and rate limiting), browser type, and similar device or log data generated when you use the site.
Payment card numbers are processed by Stripe. We do not store full card details on our servers.
3. How we use information
We use personal information to:
- Provide, operate, and improve the website and services
- Create and manage accounts and authenticate users
- Process orders, pledges, shipping, refunds, and store credit
- Send transactional emails (for example order confirmations and account notices)
- Send marketing communications where you have opted in
- Moderate community content and respond to support requests
- Review and manage artist submissions and production workflows
- Prevent fraud, enforce our terms, and protect security
- Comply with legal obligations and resolve disputes
- Understand aggregate usage and site performance
4. Legal bases (where applicable)
Where privacy laws require a legal basis, we rely on one or more of: performance of a contract (for example fulfilling an order you place); your consent (for example marketing email or optional features); legitimate interests (for example site security, analytics, and improving services); and compliance with legal obligations. You may withdraw consent where processing is consent-based, without affecting the lawfulness of processing before withdrawal.
5. Service providers
We use trusted third parties to run WarFig. They process data on our behalf and only as needed to provide their services. Current categories include:
- Supabase — authentication, database, and file storage for certain site assets
- Stripe — payment processing
- Resend — transactional email and newsletter audience management
- Vercel — website hosting, analytics, and performance monitoring
- Cloudflare R2 — delivery of public media such as rulebook and one-pager PDFs
- Upstash — API rate limiting (when configured)
- Google — OAuth sign-in, if you choose that method
These providers may process data in countries other than your own. Where required, we take steps intended to ensure appropriate safeguards for cross-border transfers.
7. Marketing communications
If you opt in to marketing email, we may send promotions, product news, and WarFig updates. You can opt out at any time via account settings, the unsubscribe link in emails, or our unsubscribe page. Transactional messages related to orders, security, or your account may still be sent even if you opt out of marketing.
8. How long we keep information
We retain personal information for as long as needed to provide services, fulfill orders, maintain business records, resolve disputes, enforce agreements, and meet legal requirements. Retention periods vary by data type (for example order records may be kept longer than transient server logs). We may anonymize or aggregate data where continued identification is not required.
9. Security
We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
10. Your rights
Depending on your location, you may have rights to access, correct, delete, or restrict certain processing of your personal information, to object to some processing, and to data portability where applicable.
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, Australian residents may request access to or correction of personal information we hold about them, and may complain to us or to the Office of the Australian Information Commissioner (OAIC) if they believe we have mishandled personal information.
To exercise rights or ask questions, contact support@warfig.com. We may need to verify your identity before responding.
11. Children
WarFig is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it where required.
12. Third-party links
The site may link to third-party websites or services (for example social media). Their privacy practices are governed by their own policies, not this one.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may also be communicated through the site or by email where appropriate.
14. Contact
Privacy questions or requests: support@warfig.com. For terms governing use of the site, see our Terms of Service.