We safeguard your inquiry data with verified transparency.

This privacy policy took effect on October 27, 2026, and governs all inquiries and interactions on gamesshop.click.

Effective Date & Scope

These privacy disclosures took effect on 2026-10-27. This document applies to all digital interactions, direct catalog submissions, support conversations, and appointments originated through gamesshop.click.

Gamesshop operates as the sole data controller for all personal information submitted through this website.

Data Controller Identity

The data controller responsible for your personal information is Gamesshop, trading online at gamesshop.click. Our commercial studio is located at 300 East 17th Avenue, Denver, Colorado 80203, Denver, Colorado, United States. Telephone inquiries reach our desk at +1 (340) 805-9700 and data compliance questions are routed to office@gamesshop.click.

We collect only necessary inquiry details, browser technical logs, and advertising campaign click identifiers.

Categories of Data Collected

When you submit our direct inquiry form (dope745.php), we record your name, telephone number, email address, physical delivery address or postal code, inquiry classification, item specification notes, and timestamped consent confirmation. Simultaneously, our secure web servers automatically record your IP address, browser user-agent string, referring URL, the moment the form was rendered, and the moment it was sent.

When you engage with our on-site support widget (papaa53.php), the support chat keeps the conversation and a token in your browser so you can return to it. Our cookie consent choice is stored locally in the browser under the key site_consent_v2, and nothing else on this site persists a choice. When you reach our website via paid advertisements, we capture campaign click identifiers appended by ad networks: gclid, msclkid, and fbclid. We maintain no user accounts, store no passwords, process no payment, and take no credit card data: nothing is sold on this site and no payment is taken.

Every piece of information collected serves a discrete operational, diagnostic, or communication purpose.

Purposes of Processing

We process your submitted contact details strictly to review product inventory allocations, calculate custom gift packaging logistics, coordinate Denver studio appointments, and prepare non-binding price quotes. Diagnostic server logs are processed to maintain system stability, defeat spam submissions, and detect automated crawlers. Advertising click identifiers are processed to determine campaign efficacy and prevent invalid ad clicks across partner networks.

Processing is grounded strictly in express consent, pre-contractual steps, and legitimate business security interests.

Legal Bases for Processing

Under applicable statutory frameworks including GDPR Article 6, our processing relies on the following lawful bases:

• Consent (Art. 6(1)(a)): We process non-essential tracking cookies and marketing identifiers solely when you explicitly accept them via our consent banner.
• Pre-contractual Steps (Art. 6(1)(b)): We process your contact details and requested item specs to prepare custom furniture or decor quotes upon your inquiry.
• Legitimate Interests (Art. 6(1)(f)): We maintain server access logs and bot mitigation tokens to safeguard infrastructure integrity and defend against fraud.

We run active digital advertising campaigns across Google, Microsoft, and Meta networks.

Advertising Platform Tracking & Click Identifiers

This website is an active destination for paid commercial traffic. Google Ads and Microsoft Advertising run traffic to gamesshop.click, and Meta Ads may direct visitors to curated collections. When you click an advertisement linking to our site, the hosting platform appends a unique click parameter to the URL:

• google ads: Appends the gclid identifier to evaluate conversion attribution.
• microsoft advertising: Appends the msclkid identifier to track search query performance.
• meta ads: Appends the fbclid parameter for traffic attribution.

These parameters are captured only to understand campaign yield and verify commercial traffic legitimacy. No platform has reviewed, endorsed, or verified our business operations.

Consent Mode v2 enforces denied storage states until you grant voluntary permission.

Google Consent Mode v2 Implementation

We implement consent mode (Consent Mode v2) across all pages. Consent Mode v2 holds ad_storage, ad_user_data, ad_personalization, and analytics_storage denied until the visitor allows storage, and sets them back to denied the moment the visitor declines or withdraws consent. No advertising cookies or conversion beacons are stored on your device until you choose to accept storage. If you click decline or subsequently withdraw permission, all four signals are returned immediately to denied.

Third-party service providers receive limited data strictly under binding data processing agreements.

Data Processors & Service Providers

We share technical information with vetted third-party vendors who assist in website hosting, communications delivery, and performance measurement:

• Google LLC / Google Ireland Ltd: Web analytics and Google Ads conversion measurement.
• Microsoft Ireland Operations Ltd: Microsoft Advertising search campaign attribution. You may review Microsoft data practices at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Advertising campaign delivery and attribution.
• Denver Hosting & Mail Infrastructure: Secure cloud server hosts providing PHP execution, SQLite storage, and SMTP relays to Anna’s studio inbox.

International data flows are protected by Standard Contractual Clauses and adequacy determinations.

Cross-Border Data Transfers

Gamesshop operates from Denver, Colorado, in the United States. If you access gamesshop.click from the European Economic Area, the United Kingdom, or Switzerland, your data is transferred to servers located within the United States. These transfers are executed pursuant to Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent adequacy frameworks to guarantee data protection standards commensurate with European law.

We enforce finite retention clocks across all communications, transcripts, and access logs.

Data Retention Periods

We do not hold personal data indefinitely. In accordance with operational necessity and Colorado legal compliance, the following retention schedules are applied:

• Inquiries and Email Records: Retained for 24 months to reference past quotes and material specifications.
• Support Chat Transcripts: Retained for 12 months from the date of conversation closure.
• Server and Access Logs: Retained for 60 days before automated cyclic purging.
• Consent Choices (site_consent_v2): Stored locally in your browser for 6 months.

Robust technical and administrative controls protect our records against unauthorised disclosure.

Technical & Organisational Security

We protect gamesshop.click using modern TLS 1.3 cryptographic protocols, encrypted SQLite databases, strict CORS configurations, content security policies, and least-privilege administrative access controls. Physical access to our Denver studio hardware at 300 East 17th Avenue is restricted to authorised personnel.

European visitors possess comprehensive rights under the General Data Protection Regulation.

Your Rights Under GDPR

If European data protection law applies to you under gdpr, you hold statutory rights including:

• Access (Art. 15): Request a copy of all personal data we maintain concerning you.
• Rectification (Art. 16): Require correction of incomplete or inaccurate records.
• Erasure (Art. 17): Request deletion of your contact records where no legal obligation mandates retention.
• Restriction (Art. 18): Restrict processing while a data challenge is resolved.
• Portability (Art. 20): Receive your submitted data in a structured, machine-readable format.
• Objection (Art. 21): Object to processing grounded in legitimate interest.
• Withdraw Consent (Art. 7(3)): Withdraw consent at any time without retroactive penalty.

US state privacy rights, including California (CCPA) and Colorado protections, are fully honoured.

US State Privacy Rights & California Disclosures (CCPA)

Under Colorado state privacy regulations and the California Consumer Privacy Act as amended (ccpa), residents of California, Colorado, and other states with applicable consumer data statutes have the right to know what personal categories we collect, the right to request deletion of personal information, and the right not to receive discriminatory treatment for exercising privacy rights.

We do not sell personal information or share personal data for cross-context behavioral advertising. We have not sold or shared consumer personal information in the preceding 12 months.

We recognise automated Global Privacy Control opt-out signals by default.

Global Privacy Control (GPC) Compliance

Our website listens for and honours the global privacy control (Sec-GPC) browser signal. When your browser transmits an active GPC header, we automatically treat this signal as a valid consumer directive to decline all non-essential analytics and advertising cookies, without requiring manual interaction with our consent banner.

Our catalog is designed for mature domestic interiors and takes no data from children.

Protection of Children's Privacy

GamesShop Click does not direct its merchandise, marketing, or digital services toward individuals under 18 years of age. We do not knowingly solicit or collect personal information from children under 13 (or under 16 where regional legislation applies). If we discover that a minor has provided contact details, we delete those records immediately.

You hold the right to lodge formal regulatory complaints with regional supervisory authorities.

Supervisory Authority Complaints

If you believe our processing of your personal data violates applicable privacy laws, you have the right to lodge a complaint with your local data protection authority. In Colorado, consumers may contact the Office of the Colorado Attorney General. California residents may contact the California Privacy Protection Agency (CPPA). Residents in the EU may file a complaint with their national supervisory authority.

Submit formal DSAR requests directly to our Denver studio desk for prompt processing.

Data Subject Access Requests (DSAR Protocol)

To exercise your statutory rights regarding data access, rectification, portability, or deletion, transmit your formal request to our designated privacy desk:

We will confirm receipt and verify your identity within 10 days, providing our formal substantive response free of charge within statutory deadlines.

Our catalog interface is engineered to conform with WCAG 2.1 Level AA accessibility standards.

Accessibility Statement

GamesShop Click is committed to ensuring digital accessibility for all users, including individuals with disabilities. We design our markup to comply with Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards. Features include minimum 44px touch targets, contrast ratios exceeding 4.5:1 on all slate ground surfaces, descriptive alternative text for photographs, explicit ARIA dialog roles, and full keyboard navigability. If you experience an accessibility barrier, please email office@gamesshop.click.

Policy revisions are published publicly with refreshed effective dates.

Modifications to this Policy

We may update this privacy statement periodically to reflect changes in our catalog practices, technology infrastructure, or legal obligations. When revisions occur, we will update the “Effective Date” at the head of this page. Material revisions will be accompanied by an alert within our site notification banner.

Direct human contact for privacy questions, studio verification, or regulatory queries.

Direct Privacy Inquiries

If you have questions, comments, or concerns regarding our privacy practices or wish to speak with our catalog curator, please reach out directly: