Most privacy policies describe a store that tracks you. This one describes ours, which does not — so rather than the usual paragraph about your experience being important to us, here is the actual list.
In effect July 26, 2026
Nothing is gathered in the background. Every item below exists because you typed it in or because an order needed it.
Your name, email address, and a hashed version of your password. Optionally a phone number if you add one. Signing in with Google gives us your name, email and profile photo from Google instead of a password.
Your shipping address and phone number, what you bought, and what you paid. Note that checking out creates a customer record even if you never signed up — that is how you can look the order up later, and it means an account exists in your name from the moment an order goes through.
Stripe sends back a payment reference and, if available, the brand and last four digits of the card. The card number itself never reaches us: it is entered on Stripe’s hosted page, and there is no card field anywhere on this site.
What LEGO you are offering — set numbers, condition, completeness — anything you write in the notes, your photos, and where you want to be paid. If you choose a cash payout that means a Cash App handle; if you choose PTO credit, the email on your PTO account.
Whatever is in the message. Contact form submissions are sent straight to our inbox and are not stored in our database, though they do exist in our email provider’s records and in the mailbox itself, like any email.
Kept in your own browser, not on our servers. Clearing your browser storage clears it.
This section is short on most sites because it is aspirational. Here it is a description of the code.
One cookie: pvd-token, which holds your signed-in session. It is set by our API, marked HttpOnly, and lasts seven days. It is strictly necessary — without it you cannot stay logged in — and it does nothing else.
Three things live in your browser’s own storage rather than in a cookie: your cart, your signed-in session details, and a random checkout identifier used to hold your stock reservation while you pay. That last one is not tied to your name and we do not use it to follow you around, but it does persist in your browser and it is passed to Stripe with your order, so we would rather name it than leave it out.
Five companies, each with a specific job.
Your email, name, shipping address and order contents. Card details are collected by Stripe directly and never pass through us.
Your name, phone number and shipping address, so a label can be printed. Our outbound carrier operates internationally, which means your delivery address is processed outside the United States when a label is created.
The images you upload. The storage is private: photos are not publicly reachable, and viewing one requires a short-lived link issued only to you or to our staff.
Your email address and the contents of what we send you.
This one is worth being exact about. Every page on this site loads fonts from Google and the Google sign-in script, which means your browser contacts Google on each page and Google learns your IP address and which page you are on. We receive nothing from those requests and we do not use them to measure anything, but they happen and you should know they do. Separately, if you use the address autocomplete at checkout, what you type in the address field is sent to Google to produce the suggestions.
We do not give your information to anyone else, other than where the law requires it.
Order, payment, refund and store credit records are kept for as long as we need them for accounting and tax — a business has to be able to show what it sold and what it refunded, and that outlives any individual account. Trade-in records and the photos attached to them are kept alongside the trade-in they belong to.
We are not going to publish a tidy number of months here, because we do not currently run an automatic purge and quoting a period we do not enforce would be worse than saying so. What we will do is delete what you ask us to, within the limits in the next section.
Email hello@pvdus.com. A person reads it and handles it by hand — there is no self-serve button for this, and we would rather tell you that than pretend otherwise. You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it.
On deletion, the honest answer has two halves. Your account details, addresses, trade-in notes and uploaded photos we can remove. Records of completed orders, payments, refunds and store credit we generally cannot, because we are required to keep them — and store credit in particular is an append-only ledger, so entries are never edited or erased. When you ask, we will tell you exactly what we removed and what we kept and why.
You can change your own name, phone number and password from your account settings at any time.
Passwords are hashed with bcrypt and never stored in a form we can read. Changing your password signs out every other device immediately. Signing out invalidates that session so it cannot be reused even if someone has the token. Trade-in photos sit in private storage that requires an authorised, expiring link to open.
No system is beyond reach, and we would not tell you otherwise. If something happens that affects your information, we will tell you what happened rather than issue a statement about how seriously we take security.
Photos taken on a phone often carry hidden information, including the location where the picture was taken. We do not strip that from trade-in uploads today. If you would rather not send it, turn off location tagging in your camera app before photographing your sets, or send a screenshot of the photo instead.
You need to be 13 or older to have an account here, and 18 or older to submit a trade-in or take a payout, since a trade-in is a sale and a payout goes to a payment handle. This is a LEGO shop and we know plenty of the people who love these sets are younger than that — the answer is that a parent buys, and a parent trades.
If you believe a child has given us information, email hello@pvdus.com and we will remove what we can.
The date at the top is when this version took effect. If we change something that matters — a new company handling your data, a new category of information, anything that would change your mind about buying — we will say so rather than quietly reissue the page.
PVD, 5639 SW Arctic Dr, Beaverton, OR 97005. We share premises and a shipping operation with PTO Ski & Snowboard, and store credit is redeemable at both, which means order and credit information is visible to the same people at both businesses.
Questions about any of this?
hello@pvdus.com →