Skip to content
everytoys

Legal

Privacy Policy

Last updated: May 17, 2026

1. Overview

everytoys ("we," "us," or "the site") is an archival catalog of collectible blind-box toys, operated by EveryTech. This policy explains what information we collect when you visit everytoys.com, how we use it, who we share it with, and the choices you have.

By using the site, you agree to the practices described here. If anything is unclear, email us at [email protected].

2. Information we collect

We collect only what we need to run the catalog:

  • Account information. If you sign in, our authentication provider (Clerk) collects your email address, name, and authentication metadata. We store a reference to your account in our database so we can save your collections and preferences.
  • Collections and preferences. Characters or series you save, currency preference, and similar settings.
  • Technical data. Standard server logs (IP address, user agent, request path) retained for a short period for security and debugging.
  • Cookies. See section 4.

We do not knowingly collect data from children under 13 (or the equivalent age in your jurisdiction). See section 8.

3. How we use information

  • To provide and improve the catalog experience.
  • To keep your account secure and prevent abuse.
  • To measure aggregate site usage so we know which series and brands people are interested in.
  • To respond to your messages and support requests.
  • To display advertising (see section 5).

We do not sell your personal information. We do not use your data to train machine-learning models.

4. Cookies and similar technologies

We use a small number of cookies and similar storage mechanisms. These fall into three categories:

  • Strictly necessary. Authentication cookies set by Clerk so you stay signed in; a first-party currency preference cookie so prices render in your chosen currency.
  • Analytics. We use Plausible Analytics, a privacy-focused analytics product that does not use cookies or collect personal data. It produces only aggregate counts of page views and referrers.
  • Advertising. Google AdSense and its third-party partners may set cookies to serve ads. See the next section.

You can clear or block cookies in your browser settings, but doing so may break sign-in and other features.

5. Advertising (Google AdSense disclosure)

We use Google AdSenseto display advertisements on this site. AdSense and its third-party vendors use cookies and similar identifiers to serve ads based on your visits to this site and other sites on the Internet. This includes the DoubleClick DART cookie and equivalent identifiers used by Google's advertising partners.

Google's use of advertising cookies enables it and its partners to serve ads to you based on your prior visits to this site and/or other sites on the Internet. You can opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalized advertising by visiting aboutads.info.

For more on how Google uses information from sites or apps that use its services, see policies.google.com/technologies/partner-sites.

Visitors from the European Economic Area, the United Kingdom, and Switzerland will be shown a consent prompt before personalized ads are served, in accordance with Google's EU User Consent Policy.

6. Your rights

Depending on where you live, you may have rights over the personal information we hold about you. These typically include:

  • The right to access a copy of your information.
  • The right to correct information that is inaccurate.
  • The right to delete your information.
  • The right to object to or restrict certain processing.
  • The right to data portability.
  • The right to withdraw consent at any time, where processing is based on consent.

EEA, UK, and Switzerland (GDPR). We process personal information based on legitimate interests (running the catalog), contract performance (account features), and consent (personalized advertising, where applicable).

California (CCPA/CPRA). California residents may request disclosure of the categories of personal information we collect, sources, purposes, and recipients. We do not sell personal information as defined by the CCPA. To exercise the right to know, delete, or correct, email [email protected].

To exercise any of these rights, email us at the address above. We'll respond within the time required by applicable law.

7. International data transfers

everytoys is operated globally. Our service providers (Clerk, Supabase, Google, Railway, Plausible) may process information in the United States, the European Union, and other jurisdictions. Where data is transferred outside your country, we rely on safeguards approved by the providers' respective regulatory frameworks (Standard Contractual Clauses, EU-US Data Privacy Framework where applicable).

8. Children

The site is not directed to children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Data retention

We retain account information for as long as your account is active, plus a short period afterward for backup and legal compliance. Server logs are retained for a limited period (typically 30 days). When you delete your account, we delete or anonymize associated personal data on a scheduled basis.

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page. Material changes will be communicated in-product or by email where we have one. Continued use of the site after changes take effect constitutes acceptance of the updated policy.

11. Contact us

For privacy questions, complaints, or rights requests:

EveryTech
[email protected]