Privacy Policy

HAUNTED ANGEL LLC
5101 Santa Monica Blvd Ste 8 # 379 Los Angeles, CA 90029
Formed in Wyoming; 2025-001687982
Privacy: privacy@hauntedangel.com

Samuel J. Moor

• Account data: email, username, password hash, verification status, account role and creation/login dates.
• Authentication and security data: session identifiers and token hashes, session timestamps, IP address, browser/device information, request logs, and abuse-prevention events.
• Avatar data: the appearance, clothing, rank and other configuration you save, plus any profile image URL.
• Reservation data: email, selected product, reservation identifier and, for signed-in users, account identifier. The current reservation form does not take payment or shipping information.
• Messages: information you send to support and delivery records for verification, reset, security and reservation emails.
• Device storage described in our Cookie and Storage Notice.

We process account, avatar and reservation information to take steps at your request and perform our contract with you; security and limited logs for our legitimate interests in protecting the service and users; communications to administer your requests; and information where law requires it. Where consent is required, it is requested separately and may be withdrawn without affecting earlier processing.

Information is disclosed only as needed to hosting, database, email, security and professional-service providers, and to authorities where legally required. Current infrastructure may include Vercel, Render, Neon and the configured email provider. Providers may process data outside your country, including in the United States. For EEA, UK and Swiss transfers, we use applicable adequacy mechanisms or approved contractual safeguards and supplementary measures where required. Contact us for information about the relevant safeguard.

Unverified accounts are scheduled for deletion after 30 days; expired action tokens promptly; expired or revoked session records within 90 days; routine security logs normally within 90 days; and non-binding reservations no later than 12 months after the relevant product release or cancellation. Active account and avatar data remain until deletion. Support and legal records are retained only for the applicable purpose, limitation period, tax, fraud-prevention or other legal requirement. Backups expire on their documented rotation.

Depending on where you live, you may request access, correction, deletion, restriction, objection, or a portable copy and may withdraw consent. US residents may also have rights to know, correct, delete, obtain a copy, opt out of sale/sharing or targeted advertising, limit certain sensitive-data uses, appeal a refusal, and use an authorized agent. We do not currently sell personal information or use it for cross-context behavioral advertising.

Email privacy@hauntedangel.com. We verify requests proportionately and do not discriminate for exercising privacy rights. EEA/UK complaints may be made to a local supervisory authority and Swiss complaints to the FDPIC.

The service is for a general audience and is not directed to children under 13. You must be at least 13 to create an account; where local law requires parental authorization for a minor, you represent that it has been obtained. Contact us if a child submitted information.

We use safeguards including hashed passwords and action tokens, restricted administrator access, encrypted transport, short-lived access credentials, server-side session controls and revocation. No system is completely secure.

Material changes will be posted here and, where appropriate, communicated through the service or email. This notice is version 2026-09-11.