Privacy Policy
Last updated: August 5, 2026
Overview
Media Mint collects information needed to operate the store, fulfill orders, support customers, protect accounts, and improve the catalog. This policy describes the data the current site can collect and the providers it may use. Media Mint does not sell personal information for money.
Information we collect
- Accounts: username, email address, password hash, saved address, account preferences, login history, loyalty activity, wishlists, alerts, and optional two-factor-authentication settings.
- Orders and payments: name, email, shipping address, purchased items, totals, discounts, gift-card use, order and refund status, carrier tracking, and payment-provider transaction identifiers. Card entry is handled by Stripe; Media Mint does not store full card numbers or card security codes.
- Gift cards: purchaser and recipient email, recipient name, personal message, balance, delivery status, and payment reference.
- Trade-ins and services: contact details, item descriptions, requested payout method, notes, quotes, shipping or tracking information, and photographs you choose to upload.
- Customer communications: contact-form messages, support correspondence, newsletter signups, and alert preferences.
- Site and security activity: session identifiers, IP address, searches, viewed or carted products, traffic source, request identifiers, timestamps, and security or error logs.
- Device and analytics data: browser and device information and page-use events when an optional analytics provider is enabled.
How we use information
- Operate accounts, carts, checkout, gift cards, trade-ins, and customer-service workflows.
- Calculate prices, shipping, taxes, discounts, refunds, inventory availability, and loyalty benefits.
- Send transactional messages and requested newsletters, restock notices, or product alerts.
- Prevent fraud and abuse, investigate errors, secure the service, and keep operational records.
- Understand searches and catalog demand and improve site performance and usability.
- Meet tax, accounting, recordkeeping, dispute, and other legal obligations.
Providers and disclosures
Information is shared only as needed for a requested feature, store operations, security, or legal obligations. Depending on which integrations are enabled, recipients can include:
- Stripe for payment, checkout, subscription, gift-card purchase, tax, and refund processing.
- Shipping and fulfillment providers such as USPS, EasyPost, or Printify for rates, labels, fulfillment, and tracking.
- Email providers for transactional and opted-in messages.
- Plausible or Google Analytics for site analytics when configured.
- Google reCAPTCHA for abuse prevention when configured.
- Sentry for error and performance monitoring when configured. The application disables Sentry's default collection of personally identifying fields, but diagnostic events can still contain technical request context.
- Google Cloud Vision and Google Gemini for trade-in photo analysis only when you give the consent requested beside the upload control. Separate consent is required before photos are eligible for a staff-reviewed training export.
- Infrastructure and professional-service providers that host, store, secure, audit, or support the business.
Media Mint may also disclose information when legally required, to protect customers or the service, or as part of a business transfer subject to applicable law.
Cookies and local storage
The site uses cookies or browser storage for sessions, authentication, carts, preferences, recently viewed items, security, and optional analytics. Third-party checkout, anti-abuse, analytics, or embedded services may set their own cookies under their policies. Browser controls can block optional storage, but blocking essential session storage can prevent login or checkout from working.
Trade-in photos
Uploaded trade-in photos are private store records and are not published as product images automatically. Staff can review them to evaluate a submission. Provider analysis and training eligibility follow the separate consent choices shown on the trade-in form. Withdrawing consent does not necessarily require deletion of processing already completed or records Media Mint must retain; contact Media Mint to make a request.
Retention and account deletion
Information is retained for as long as needed for the purposes above, including fraud prevention, accounting, taxes, warranty or return handling, dispute resolution, and legal compliance. Retention varies by record type and provider.
The account-deletion control removes the login account and deletes or disassociates many account features. It does not erase every business record: orders and related payment, fulfillment, refund, tax, gift-card, trade-in, security, and accounting records may remain where needed. Some retained records can still contain contact or transaction information even after their user-account link is removed.
Your choices and requests
- Update available account information and alert preferences from your account pages.
- Use the unsubscribe link in marketing email or ask Media Mint to stop optional messages.
- Use the account-deletion control when eligible.
- Ask to access, correct, delete, or receive information, or object to certain processing. The response depends on your location, identity verification, and records Media Mint is required or permitted to retain.
Security
Media Mint uses controls such as password hashing, CSRF protection, rate limits, access controls, optional two-factor authentication, security headers, and payment-provider-hosted card entry. No internet service can guarantee absolute security.
Children
The service is not directed to children under 13, and Media Mint does not knowingly collect personal information from them. Contact Media Mint if you believe a child submitted information.
Changes and contact
This page will be updated when material practices change. Questions or privacy requests can be sent to contact@mediamintgames.com.