Privacy Policy

Kopeen's Hobby Shop is an online store for trading card games and collectibles, based in Cengkareng, West Jakarta, Indonesia. In this policy, "we" and "us" mean Kopeen's Hobby Shop.

This policy explains what personal information we collect when you use our website, why we collect it, who helps us handle it, and what you can ask us to do. You can reach us at info@kopeens.com.

What we collect depends on how you use the shop.

If you sign in with Google

• Your name and email address, which Google shares with us when you sign in.
• Your phone number, which we ask for once at your first checkout and save to your profile.
• Your saved shipping addresses, if you choose to save them. Each address has a label, the recipient's name and phone number, the province, city and district, the postal code, the full address and any delivery notes.
• Your points, your loyalty tier, your wishlist, the vouchers issued to you and your progress in our mini-game.
• Your cart. While you are signed in, the items in your cart are saved to your account, so you find them again on any device. If you had a guest cart in your browser, it is added to your account's cart when you sign in.
• Your order history. If you placed guest orders with the same email address as your Google account, they also appear in your order history.

If you check out as a guest

• Your name, email address, phone number and shipping address. You enter them for each order.
• A private order link. It lets you come back to your order without signing in, and we put it in our emails and on your order pages. If you lose it, the "Find my order" page can email it to you again when you give us your order number and email address.

For every order, whether you are signed in or a guest

• What you ordered, the amounts, the order status and the delivery tracking details, including the courier's tracking number.
• Payment proofs: the image or PDF you upload to show your payment. A proof can show details from your bank or payment app.

Payments are made by manual transfer, so we do not collect payment card details.

If you file a complaint

• Your description of the problem, your photos and your unboxing video (a file you upload, or a link you give us).

About how you use the shop

• The pages you open, what you search for, the products you view or add to your cart, and whether you start or place an order. We collect this with our analytics service, PostHog (see section 4), together with technical details such as your browser, device type and approximate location from your connection.
• If you are signed in, or you place an order as a guest, we link this activity to your email address (and your name, if you signed in with Google) so we can understand what customers do in the shop.

About the safety of the shop

• If we warn or restrict an account because of fraud or abuse, we record the warning or restriction and the reason for it. For guest checkout, a restriction can also cover the email address and phone number that were used.

• To let you sign in and keep your account. Your name and email from Google identify your account.
• To take, check and deliver your orders. We use your order details, address, recipient name and phone number to prepare your parcel, work out shipping, hand the parcel to the courier and follow its progress. We use your payment proof to check that your payment arrived and to match it to your order.
• To contact you about your orders and account. We email you about order and payment updates, shipping and delivery, complaints, points and account warnings. For guest orders, we use your email address to send your private order link. We use your phone number for delivery and to reach you about an order.
• To remind you about your cart. If you are signed in and leave items you can still buy in your cart without ordering, we may send you an email reminder. We send these reminders rarely, and never more than one about the same cart. You can turn them off with the link in the email or in your profile.
• To handle complaints, refunds and replacements. We use your description, photos and video to review a complaint and decide on the outcome.
• To run our loyalty features. We use your points, tier, wishlist, vouchers and game progress so these features work. We also use your wishlist to email you when a product you saved opens for pre-order, is back in stock, goes on sale or becomes available. When the wishlist is available, you will be able to turn these emails off in your profile.
• To apply purchase limits and promotions fairly. Some products and promotions have limits per customer. We count signed-in customers by account, and guests by email address or phone number.
• To understand and improve the shop. We use analytics about how the shop is used, linked to your email address when you are signed in or have placed an order, to see which products people look at, where orders are lost, and what to stock.
• To prevent fraud and abuse. We use the records described above to refuse service where our Terms & Conditions allow it.

We use these services to run the shop, and your information goes to them as needed for that.

• Supabase is our database and sign-in service. It stores accounts, orders, addresses, points and the other information described above.
• Vercel hosts our website.
• Amazon Web Services (S3) stores the images and files on the site. Some are public, such as product and banner images. Others are private: payment proofs, complaint photos and complaint videos. Private files can only be opened through short-lived secure links, and complaint videos can be viewed only by our admins.
• Google handles "Sign in with Google" and tells us your name and email address. Google's own privacy policy covers what Google does with your data.
• PostHog is our analytics service. It receives the usage information described in section 2, including your email address and name when we can link them to your visits. PostHog's servers are in the United States.
• Hostinger sends our emails to you.
• RajaOngkir (Komerce) is the shipping service we use to get JNE shipping rates for your delivery area and parcel weight. We may also use it to check the tracking of shipped parcels.
• JNE is the courier that delivers your parcel. We give it the recipient's name, phone number and address.

We use cookies to keep you signed in. These sign-in cookies are set by our sign-in service, Supabase. Our analytics service, PostHog, also stores a small identifier in your browser so it can recognise a returning visit. We do not use advertising cookies or advertising trackers.

Some features keep small amounts of information in your own browser instead of on our servers, such as a guest cart, or the last shipping address you typed so that you do not have to type it again.

You can clear or block cookies and site data in your browser settings. If you block the sign-in cookies, you will not be able to stay signed in. If you block the analytics identifier, the shop works the same. You can also ask us at info@kopeens.com to delete the analytics data linked to your email address.

We keep personal information for as long as we need it for the reasons in this policy. We do not set fixed time periods here. In general:

• Account information is kept while you have an account with us.
• Records of orders, payments, shipping and complaints are kept for as long as we need them to run the shop and to deal with questions or disputes about an order.
• A cart saved to your account is deleted automatically when it has not been changed for a long time.

When we no longer need information, we may delete it or make it anonymous. You can also ask us to delete your information, as described in the next section.

You can ask us to:

• show you the personal information we hold about you,
• correct information that is wrong or out of date, or
• delete your personal information.

Email info@kopeens.com to make a request. Write from the email address on your account, or for a guest order the email address used on the order, so that we can find your information. There is no "Delete my account" button on the site, so we handle deletion requests by email. Where we still need a record, for example for an open order, we may not be able to delete everything.

Indonesia's personal data protection law (UU No. 27/2022) also gives you rights over your personal data.

Children should use the shop with the help of a parent or guardian. We do not knowingly collect personal information from a child on their own. If you think a child has given us personal information, email info@kopeens.com and we can correct or delete it.

We may change this policy from time to time. When we do, we update this page and the "Last updated" date at the top. Please check back now and then.

For questions about this policy or about your personal information, email info@kopeens.com.

Kopeen's Hobby Shop
Online store, Cengkareng, West Jakarta

The other ways to reach us are on our Contact page.