Privacy Policy

Privacy Policy

Moon Stone - Privacy Policy

Last updated: April 2026

Moon Stone TCG is operated by 500 PLUS, LLC ("Moon Stone", "I"). This policy explains what information I collect from you, how I use it, and your rights regarding your data. I collect the minimum necessary to run the store and never sell your personal information.

What I Collect

  • Account and order data: name, email address, shipping address, order history, and payment method (last 4 digits and type only -- full card data is handled by Shopify Payments and never stored on Moon Stone systems).
  • Waitlist and marketing sign-ups: email address and name when you submit the waitlist or footer newsletter form on moonstonetcg.com.
  • Site usage: pages visited, session duration, browser type, and referring URL via Shopify's built-in analytics. I do not use Google Analytics or Facebook Pixel.
  • Communications: contents of emails you send to max@moonstonetcg.com.

How I Use It

  • Fulfilling orders: processing payments, coordinating shipment, handling returns and damage claims.
  • Member communications: sending order confirmations, shipping updates, and the welcome email sequence you opted into.
  • Member emails: if you joined the waitlist or are a member, I send updates about new catalog additions and policy changes via Klaviyo. You can unsubscribe from any non-transactional email.
  • Fraud prevention and security: detecting and blocking unauthorized account access or purchase-limit circumvention.
  • Improving the store: understanding which pages are useful and where people drop off.

What I Do Not Do

  • I do not sell your personal information to any third party.
  • I do not share your data with advertisers or data brokers.
  • I do not use your purchase history for resale or profiling outside of Moon Stone operations.

Service Providers

I use third-party services to operate the store. Each processes your data only as needed to provide that service:

  • Shopify -- e-commerce platform, payment processing, order management.
  • Klaviyo -- email delivery for the welcome sequence and member updates you opt into.
  • Shipping carriers (USPS, UPS, etc.) -- receive your name and address to deliver your order.
  • Cloudflare -- DNS, CDN, and security layer for moonstonetcg.com.

Cookies

Shopify sets a session cookie to keep you logged in and to process your cart. Klaviyo sets a tracking cookie if you open a Moon Stone email and click through to the site. I do not set any other cookies. You can disable cookies in your browser; doing so will break the cart and checkout.

Data Retention

I retain order records for 7 years as required for tax purposes. If you request deletion of your account, I will delete your personal data from Shopify and Klaviyo within 30 days, except for records required by law.

Children

Moon Stone is not directed at children under 13. I do not knowingly collect personal information from anyone under 13. If you believe a child has submitted information, email max@moonstonetcg.com and I will delete it promptly.

Security

All data is transmitted over HTTPS. Payment data is handled by Shopify Payments under PCI-DSS compliance. I do not store full card numbers.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information I collect and how I use it (this policy covers that).
  • Access the specific personal information I hold about you.
  • Correct inaccurate personal information.
  • Request deletion of your personal information (subject to legal retention requirements).
  • Opt out of the sale or sharing of personal information -- I do not sell or share personal information, so this right is already honored by default.
  • Non-discrimination: I will not treat you differently for exercising any privacy right.

To exercise any of these rights, email max@moonstonetcg.com with "Privacy Request" in the subject line. I will respond within 45 days.

Other US State Privacy Rights

Residents of states with applicable privacy laws (including but not limited to Texas, Oregon, Colorado, Virginia, and Connecticut) have similar rights to access, correct, delete, and opt out of certain data uses. Contact max@moonstonetcg.com to submit a request.

International Visitors

Moon Stone ships to US addresses only. If you are located in the EU or UK, note that by submitting your information you consent to its processing in the United States. The lawful basis for processing is performance of a contract (order fulfillment) and legitimate interest (fraud prevention, security).

Changes to This Policy

If I make material changes to this policy, I will notify active members by email before the changes take effect. Continued use of Moon Stone after that notice constitutes acceptance of the updated policy.

Contact

Questions or privacy requests? Email max@moonstonetcg.com with "Privacy" or "Privacy Request" in the subject line.

500 PLUS, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713