Legal · Privacy Policy

Your data stays
in The Den.

Plain English. No dark patterns. We never sell your info and we collect only what we need to ship controllers and answer support emails.

Last updated · May 28, 2026

We Never Sell Data

Your info stays with us. Period.

Encrypted Checkout

Stripe handles cards. We never see them.

Minimal Tracking

Essential cookies + opt-in analytics only.

Your Data, Your Call

Export or delete anytime, one email.

What We Collect

Order info: name, shipping address, email, phone (for delivery questions), and the controllers you swap or buy.
Account info: email + password hash if you create a Den account. We never store your password in readable form.
Payment info is handled entirely by Stripe — we receive a token and the last 4 digits, never your full card number.
Site activity: pages viewed, device type, and rough location (city-level) via privacy-respecting analytics. No cross-site tracking.

To fulfill orders — print labels, run trade-in valuations, ship your build, and follow up on warranty swaps.
To send order updates and one-line shipping notifications. Transactional only — no spam.
To improve the site and product mix based on what people actually buy and where things break.
Drop-list emails are opt-in and you can unsubscribe in one click from any email we send.

Stripe — processes your payment. PCI-compliant, never shared back to us in full.
USPS / UPS — name + address + phone to deliver your box. Standard carrier handoff.
Email provider — Postmark/Resend for transactional and drop-list mail.
Nobody else — we do not sell, rent, or trade your info to advertisers, data brokers, or 'partners.'

Essential cookies keep your cart and login session working. These cannot be turned off without breaking the site.
We use privacy-first analytics (no personal identifiers, no ad pixels) to see traffic patterns. You can opt out via your browser's Do Not Track signal — we respect it.
No Facebook Pixel, no TikTok Pixel, no remarketing audiences. If you visit, leave, and never come back, you will not see us follow you around the internet.

Request a copy of everything we have on you — we'll send a JSON export within 7 days.
Ask us to delete your account and order history (we keep tax-required records for 7 years per US law).
Correct anything that's wrong — addresses, names, email — by replying to any order email.
California, EU, and UK residents have additional rights under CCPA / GDPR. Same email, same process, same answer.

Order records: kept 7 years (US tax + warranty claims). After that, purged.
Account data: kept until you delete it. Inactive accounts (3+ years no login) get a heads-up email before cleanup.
All data sits in encrypted databases. Access is restricted to the small team that runs The Den.
If we ever have a breach, you'll hear from us within 72 hours — no PR-speak, just what happened and what to do.

SwapMamba is not directed at anyone under 13. We do not knowingly collect data from children. If you believe a minor signed up, email us and we'll wipe the account immediately.

If we materially change how we handle your data, we'll email everyone on file and post the update here 30 days before it takes effect. The 'Last updated' date at the top always reflects the current version.

Still have questions?