Last updated 16 September 2026
Privacy
The short version: this site collects an email address only when you give it one — on the waitlist form, or at checkout when you buy something. There is no analytics script, no advertising pixel, no session cookie, and no third-party embed on this page.
What is collected
- Your email address, when you submit the waitlist form.
- Which option you picked — a beta seat, new plates and characters, or both — so the right thing gets sent to you.
- Ordinary web server logs, which include IP addresses, kept only for security and abuse handling. A rate limiter uses your IP in memory to stop a single source flooding the form.
Double opt-in
Submitting the form does not add you to anything. It sends one email asking you to confirm. If you never click the link, the address is never added to a list, and the signed confirmation link expires in 48 hours by itself.
Purchases
Checkout is run by Stripe through Link, which is the merchant of record for anything you buy here. Link takes your payment details, handles sales tax and sends your receipt; this site never sees your card number.
After you pay, the store keeps a record of what you bought, the amount, the email address you gave at checkout, and Stripe's reference for the order. It uses that address to send your download link, and counts how often the link is used so that it can expire. Order records are kept as long as they are needed to deliver your download, answer questions about an order, and meet tax and accounting obligations.
The file you download is stamped with the email address you bought it with, printed in the margin of each page, so that a copy which ends up somewhere it should not is not anonymous. The stamp is applied as the file is sent; the stored copy carries nobody's address.
What you are agreeing to when you buy is in the terms, and help answers the common order questions.
Who else sees it
Email is sent and the subscriber list is stored by Resend, acting as a processor for this site alone under its own dedicated account; the same account sends download links. Payments are handled by Stripe and Link, as described above. The site is served from a private server behind Cloudflare, which sees request metadata as the network provider and also stores the store's order records and download files. Your address is not sold, rented, traded, or handed to advertisers, and it is not used to build a profile of you.
How to get rid of it
Every list email carries an unsubscribe link, which takes effect immediately. If you would rather your address were deleted outright instead of marked unsubscribed, reply to any email from us and say so — that is a deletion, not a downgrade. If you bought something, the order record stays for as long as tax and accounting rules require, and the rest is removed when you ask.
Children
This site is not directed at children. The waitlist and the store are intended for adults.
Changes
If this policy changes in a way that affects what is collected or who sees it, the date at the top changes and anyone on the list is told before it takes effect.
Contact
Reply to any email from this list, or write to privacy@firmori.io.