The store is in preview. Ordering is not available. Purchase conditions below describe our standard policy when checkout opens. Website-use and privacy information describe the current services.
About this policy
This Privacy Policy explains how 3D Bandits handles information in connection with this website, customer support and, when available, purchases. “We,” “us” and “our” mean 3D Bandits. It covers our own practices, rather than the independent practices of websites, carriers or payment and hosting providers you choose to use.
The storefront currently operates as a preview. Checkout and customer accounts are not active. Newsletter subscriptions and support forms can submit information to 3D Bandits when you choose to use them. The sections below distinguish the current website from services that may become available when the store opens.
Information used by the current website
- Sample bag: product identifiers and quantities are saved in local storage on your device so the bag remains available in the same browser.
- Browsing and connection data: hosting and security providers may process IP address, browser and device information, requested pages, timestamps and security events to deliver and protect the website.
- Hosted access: this preview may require ChatGPT sign-in. The hosting and authentication provider handles account and access information under its own privacy terms. The storefront does not receive your ChatGPT password or conversation history.
- Forms: newsletter subscriptions submit your email and consent details; contact submissions submit the information you enter for review by 3D Bandits. Browser autofill may retain information according to your own browser settings.
Fonts, product imagery and studio videos are served with the website. No third-party advertising pixels, analytics tags or social-media video embeds are implemented in the storefront code.
Information for future orders and support
Information relevant to support and, when purchasing opens, orders may include your name, email, telephone number if required for delivery, billing and shipping addresses, order contents, transaction status, customer correspondence and photographs you choose to provide about a product issue. Any activated collection will be disclosed at the point of use and in an updated policy.
Payment details should be entered only through the secure payment provider presented at checkout. Do not send full card numbers, passwords, government identification or other sensitive information through customer support. We will not request these details to resolve an ordinary product inquiry.
Newsletter, support and order lookup
Newsletter signup stores your email, consent version, signup source and time in the store database. Support submissions store the name, email, selected topic, optional order number and message you provide, together with a reference number and submission time. These records are not publicly listed or made available through a public browsing endpoint.
Order lookup compares a keyed hash of your email and order number with an order lookup key. Both entries are required. A successful match can show order status, included items and assigned shipment information without disclosing a customer email or delivery address. Incorrect combinations receive a generic response.
To limit repeated welcome offers and abusive form attempts, the server derives a pseudonymous key from the connecting IP using a private secret. The raw IP is not stored in the application’s popup or rate-limit tables. An IP shared by multiple people can also share the popup cooldown. Hosting providers may independently process connection data for security. Subscription records are kept for the subscription and necessary suppression or legal purposes; support messages are kept as needed to resolve the request and meet applicable obligations.
How information is used
Information is used as relevant to operate the website; preserve your sample bag; authenticate authorized access; answer a request you initiate; process and deliver an order when ordering opens; address returns and product safety issues; prevent fraud and abuse; maintain records required by law; and exercise or defend legal rights. We do not collect information through the preview merely because a possible future use is described here.
Marketing subscriptions are optional. Submitting a signup stores your email address, consent version, signup source and time. A welcome code is shown on screen; this does not mean an email has been sent. Marketing messages, when sent, will include an unsubscribe method. You can also use the preference link provided after signup. An unsubscribe request does not prevent messages needed to administer an order, a support request or a legal obligation.
Service providers and other disclosures
Providers may process information needed for hosting, security, authentication, payment processing, delivery, communications or support when those functions are used. We do not authorize providers acting on our behalf to use customer information for unrelated purposes. Providers operating an independent service may also apply their own terms and privacy notices.
We may disclose information when reasonably necessary to comply with law, lawful process or a valid government request; investigate fraud or security incidents; protect a person’s safety; establish or defend a legal claim; or complete a business transfer with appropriate protections. We may also disclose information at your direction. We do not sell personal information or share it for cross-context behavioral advertising through this storefront.
Cookies, local storage and your choices
The sample bag uses the browser key bandits-bag. You can remove it by clearing this site’s storage in your browser; doing so removes the saved sample bag. Hosting and sign-in services may use their own essential cookies or similar technology. Read our Cookie Policy for details and controls.
If optional analytics or advertising technology is introduced, we will update the relevant disclosures and obtain consent where required before enabling it. Continued browsing alone will not be treated as consent where the law requires an affirmative choice.
Retention
Sample bag data remains in your browser until you clear it, the browser removes it or you remove the items. The welcome popup stores a local dismissal timestamp and a server-side keyed hash derived from the connecting IP to apply its rolling 24-hour cooldown. The application does not retain the raw IP in that popup record. Expired popup and short-lived rate-limit entries are removed during service cleanup. We do not maintain a separate server-side copy of that sample bag in the current storefront. Hosting and sign-in records are subject to the relevant provider’s retention practices.
When customer records are collected, we will keep them only as long as reasonably needed for their stated purpose, applicable accounting or legal obligations, fraud prevention and the resolution of a dispute. Records no longer needed will be deleted or de-identified, subject to lawful retention and backup cycles. We will not retain a child’s information simply for a possible future use.
Security
We use safeguards appropriate to the information and services involved and expect relevant providers to protect information entrusted to them. No website, network or storage system can be guaranteed completely secure. This statement does not waive obligations to use reasonable security measures or to provide legally required incident notices.
Use a trusted device and protect the account you use to access the hosted preview. If you believe information has been exposed, use the contact instructions below; do not include additional sensitive data in the report.
Children and family shopping
The characters can appeal to families, but purchasing and customer-support submissions are for adults. We do not offer child accounts, public profiles, chat or a feature that asks children to provide personal information. Parents and guardians should manage any purchase and support inquiry themselves.
We do not knowingly seek personal information from children under 13 through our forms. If we learn that a child’s information has been collected in circumstances requiring parental consent without that consent, we will take appropriate steps to restrict use and delete it. A parent may request review or deletion using our contact instructions. Any future feature directed to children must be assessed and meet applicable parental-notice and consent requirements before it launches; this policy is not a substitute for those requirements.
Privacy rights and requests
Depending on your location and the law that applies, you may have rights to access, correct, delete or obtain a copy of personal information; restrict or object to certain uses; withdraw consent; or appeal a denied request. These rights are subject to applicable conditions and exceptions, including records we must retain by law. We do not promise that every privacy law applies to every visitor.
Submit requests through the privacy topic on our Contact Us page. Your message and contact details are stored for 3D Bandits to review. We may reasonably verify your identity and an authorized agent’s authority without asking for unnecessary information. We will respond within the applicable legal period and will not unlawfully discriminate against you for exercising a privacy right. For records controlled by a hosting or authentication provider, you may also need to contact that provider.
International access
Accessing the website from another country may involve processing by providers in the United States or other locations where they operate. Privacy laws can differ between countries. Where legally required, applicable safeguards and notices must be in place for a restricted international transfer. Access alone does not waive rights under local law.
Contact and changes
Privacy inquiries are handled by 3D Bandits. Visit Contact Us for the current support status. The contact form can receive requests and provides a reference number. It is not an emergency service. Additional business contact details will be published before orders open.
We may revise this policy as the website or our practices change. The date above identifies the latest version. Material changes will be explained by an appropriate notice and, when required, a new choice or consent. A revised notice does not retroactively authorize a materially different use of information collected under an earlier notice.