Privacy Policy

Last updated: May 17, 2026

The Forge Games and Hobbies ("we," "us," or "The Forge") operates the website at forgegamesandhobbies.com and the physical store at 3450 Seminole Trail Suite 105, Charlottesville, VA. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We aim to keep this short, clear, and honest.

What we collect

Information you give us directly

• Account details — your name, email address, and phone number when you create an account.
• Order information — items purchased, shipping address (for online orders), and order totals.
• Communications — the content of any emails or messages you send us.
• Job applications, event sign-ups, and surveys — only the information you enter into those forms.

Information collected automatically

• Session cookies — required to keep you signed in. Cleared when you sign out.
• Server logs — your IP address, browser, and the pages you visit, kept briefly for security and to diagnose issues.

We do not use third-party advertising trackers, cross-site tracking pixels, or behavioral profiling services on this website.

How we use your information

• To create and maintain your account, including your Forge Free Membership.
• To process orders, in-store sales, trade-ins, and store credit.
• To send you account-related emails (e.g., order confirmations, password resets, invite emails).
• To run in-store events, leagues, and tournaments you sign up for.
• To improve the website and the customer experience.
• To comply with legal obligations (tax records, etc.).

Payments

Online payments are processed by Square. Card numbers and payment details are entered directly into Square's secure form and are never stored on our servers. We receive only a transaction reference, the amount, and the last four digits of the card for receipts. Square's privacy policy is available at squareup.com/legal/privacy.

Third-party services we use

The Forge uses a small number of services to run the site and operate the shop. None of these receive more information than is necessary for the function listed.

• Square — payment processing.
• Resend — transactional email delivery (account confirmations, password resets, order receipts).
• Google Calendar — optional sync of our public event calendar, populated with event titles, times, and descriptions. No customer-specific data is shared.
• Discord and Facebook — we post event announcements to our own Discord server and Facebook Page. These posts contain event details only; they do not include customer information.
• TCGplayer, JustTCG, and Scryfall — used to look up card prices, product details, and inventory. No customer information is sent to these services.
• GoDaddy — our website hosting provider.

Facebook integration

When we publish an event, our system posts the event's title, time, location, and description to The Forge's own Facebook Page using Meta's Graph API. This integration is outbound only. It does not access, collect, or store any data about Facebook users, including visitors to or followers of our Page.

Email

We send emails for transactional reasons (account creation, order confirmations, password resets, event-related notices). We will only send marketing or newsletter content to people who opt in. Every marketing email contains an unsubscribe link.

Sharing your information

We do not sell, rent, or trade your personal information. We share information only when:

• It's necessary to provide a service you requested (e.g., your shipping address goes to the shipping carrier).
• You explicitly direct us to (e.g., posting a public event you signed up to host).
• We're required to by law (e.g., a valid subpoena or tax authority request).

Data retention

We keep account information for as long as your account is active. Order records are retained for at least seven years to meet Virginia tax and accounting requirements. Server logs are typically purged within 30 days.

Your rights

You can:

• View or update your account information by signing in and visiting your account page.
• Request a copy of the personal data we hold about you.
• Request deletion of your account and associated data, except records we're required to keep for tax or legal reasons.
• Opt out of marketing emails at any time using the unsubscribe link or by replying to ask.

To exercise any of these rights, email support@forgegamesandhobbies.com or call (434) 264-1292.

Children's privacy

The Forge welcomes players of all ages in the store. The website is not directed at children under 13, and we do not knowingly collect personal information from children under 13 online. If a parent or guardian believes their child has provided us with personal information, please contact us and we will remove it.

Security

We use standard industry practices to protect your information, including HTTPS encryption for all site traffic, password hashing, and limited access to account databases. No system is perfectly secure; if a breach affects your information, we will notify you as required by law.

Changes to this policy

If we materially change how we collect or use your information, we'll update this page and the "Last updated" date at the top. For significant changes that affect existing account holders, we will email you.

Contact