Privacy notice.

Controller and purposes

The trader shown above is the controller. We use checkout and account data to perform or prepare the sale, arrange delivery, prevent fraud, answer support requests and meet accounting or legal obligations. We use a launch email address only with your consent. Optional storefront analytics runs only after you choose “Allow analytics”.

What we collect

Depending on what you use, this includes your name, email, phone, delivery address, order and return history, account details, policy acceptance and support messages. For a replica checkout, AIRSOFTCY stores the Stripe Identity session reference, status, expiry and the time adulthood was confirmed. We do not store the ID images, selfie, document number or date of birth. Analytics uses an opaque visitor/session identifier, page path, coarse device category and coarse referrer source; it is not intended to identify you.

Service providers and transfers

Neon provides authentication and database hosting, Vercel provides application and Blob hosting, Stripe processes payments, and Stripe Identity hosts replica age verification. Resend may deliver the launch message when configured. These providers receive only the information needed for their service and may process it outside Cyprus or the EEA under the safeguards required by data-protection law. We do not store full card numbers.

Retention

We keep order, payment, tax and accounting records for the period required by law. The minimal local identity result is retained with the restricted order where needed to demonstrate the age check; incomplete local references expire after 48 hours. Stripe controls retention and redaction of the identity material it hosts. Account, support and return data are kept while needed for the relationship and its legal claims. Launch subscriptions remain until you withdraw consent or the launch communication is complete. Optional analytics is kept only for the reporting period approved by the trader.

Your rights

You may ask for access, correction, erasure, restriction, portability or object to processing where the law allows. You may withdraw consent at any time; this does not affect processing already carried out lawfully. Email the controller shown above to make a request. You may also complain to the Cyprus supervisory authority.

Privacy choices

Use “Manage privacy choices” in the footer to change optional analytics consent. Essential basket and appearance storage can remain available because the storefront needs it to provide the function you requested.