Privacy Policy

Your card data never touches our server

All payments are processed by PayPal. When you check out, payment happens on PayPal's secure, PCI-compliant systems — RailForge never sees or stores your card number. We receive only what we need to fulfill your order: a confirmation that payment cleared, your email, and (for physical items) the shipping address you gave PayPal.

Information we store

• Order records: your order reference, items, totals, email, and — for physical orders — your shipping name and address.
• Download links: tokenized, expiring links tied to your order (and a download count/timestamp for support and fraud protection).
• Custom photos: for Figure Forge, the reference photo you upload is stored privately, used only to make your figure, and is never shown publicly.
• Reviews: if you submit one, the name and text you provide are shown publicly once approved; your email (optional) is kept private.

Use of your information

We use your information only to process and deliver your order, provide support, and — if you ask us to — answer your questions. We don't sell your data, and we don't send marketing email you didn't ask for.

Cookies & analytics

The site uses a basic session cookie so your cart and admin login work — that's it. We don't run third-party advertising trackers. PayPal and our host may set their own cookies as part of providing their services.