Legal // Privacy
Privacy policy
Effective 31 October 2026
The short version
- This site sets no tracking cookies and runs no advertising trackers.
- We count visits with cookieless, anonymous analytics — and skip even that if your browser sends Global Privacy Control or Do Not Track.
- We have no customer accounts and don't store your name, address or payment details on this site.
- Orders are placed with Fourthwall, which sells, ships and handles payment as the merchant of record.
- We never sell or share your personal information for advertising.
1. Who we are
This website, tombeckhauser.shop, is operated by Tom Motorsports s.r.o., Blatecká 3344, 276 01 Mělník, Czech Republic, company ID (IČO) 06853838 ("we", "us"). We are the controller for the personal data described in this policy, except where we say another company is responsible.
Questions or requests about your data: . Full operator details are in our legal notice.
2. When you browse the site
Hosting and server logs
The site is hosted by Netlify, Inc. When your browser requests a page, the hosting servers automatically process technical data — your IP address, browser type, the page requested, the referring page and the time of the request — to deliver the page, keep it secure and defend against abuse. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Netlify keeps these logs only for a short period under its own retention rules.
Fonts and scripts
All fonts, scripts and images that make up the site are served from our own domain. Your browser does not contact Google Fonts or other content networks when you visit.
Anonymous analytics
We use Cloudflare Web Analytics to understand how many people visit and which pages they view. It does not use cookies or local storage, does not create a profile of you and does not follow you across other websites. It records aggregate information such as page views, referring sites, country, and device and browser type. Legal basis: our legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR). If your browser sends a Global Privacy Control or Do Not Track signal, the analytics script is not loaded at all.
Stream status
The "Transmissions" panel shows whether Tom is live on Twitch. Our server asks Twitch for the channel's status. Your browser only talks to our own server, so no information about you is sent to Twitch. If you follow the link to Twitch, Twitch's own privacy policy applies there.
3. When you shop
Browsing products and your cart
Product information, prices and your cart are provided by Fourthwall, Inc. through its Storefront API. When you view products or change your cart, your browser connects directly to Fourthwall's servers, which receive your IP address and the products in your cart. We store a random cart ID and your currency choice in your browser's local storage so your cart is still there when you come back. This is strictly necessary for the shopping cart you asked for, so it doesn't require consent. You can clear it at any time by clearing your browser's site data.
Checkout and orders
Checkout takes place on a page hosted by Fourthwall. Fourthwall is the seller and merchant of record for all products: it collects your name, email address, shipping and billing address and payment details to process, ship and support your order, and it handles this data as an independent controller under the Fourthwall privacy policy. Payments are processed by Fourthwall's payment providers. We never see your full card details.
Through our Fourthwall dashboard we can see order details — name, email address, shipping address and the items ordered — so we can help with questions about your order. We use them only for that, and for meeting legal obligations such as bookkeeping. Legal bases: performance of a contract (Art. 6(1)(b) GDPR), our legitimate interest in customer support (Art. 6(1)(f) GDPR) and legal obligations (Art. 6(1)(c) GDPR).
Marketing emails
If you choose to sign up for updates during checkout or on our Fourthwall pages, Fourthwall handles that list on our behalf. You can unsubscribe at any time using the link in every email. Legal basis: your consent (Art. 6(1)(a) GDPR).
4. When you email us
If you write to , we use your email address and message to reply and to deal with your request. Legal basis: steps related to a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete correspondence once it's no longer needed, unless we have to keep it for legal reasons.
5. Cookies and local storage
We don't set any cookies. We use your browser's local storage for three things only:
| Key | Purpose | Kept until |
|---|---|---|
trg.cart | Remembers your cart ID | You clear site data or the cart expires |
trg.currency | Remembers the currency you picked | You clear site data |
trg.notice | Remembers that you dismissed the privacy notice | You clear site data |
Fourthwall's checkout pages may set their own cookies. They are described in Fourthwall's privacy policy.
6. Who receives data
- Netlify, Inc. (USA): website hosting.
- Cloudflare, Inc. (USA): anonymous website analytics.
- Fourthwall, Inc. (USA): product catalogue, cart, checkout, payment, fulfilment and customer emails.
These providers are in the United States. Where personal data from the EU, EEA, UK or Switzerland is transferred there, the transfer relies on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the European Commission's Standard Contractual Clauses. We don't sell personal data, and we don't share it with anyone else unless the law requires us to.
7. How long we keep data
Server logs and analytics are kept only briefly by our providers, and analytics are aggregated. Order information is kept as long as tax and commercial law requires — typically up to 10 years for accounting records. Emails are deleted once your request is resolved, unless we need to keep them for legal reasons.
8. Your rights (EU, EEA, UK and Switzerland)
You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, and to data portability. Where processing is based on consent, you can withdraw that consent at any time. To exercise any of these rights, email . We'll answer within one month.
You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work, or where an alleged breach took place. Our lead authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
9. Your rights (United States)
Residents of California and other states with consumer privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others) have the right to know what personal information we collect, use and disclose; to access it; to correct it; to delete it; and not to be discriminated against for exercising these rights.
The categories we collect are described above: identifiers (IP address and, for orders, name, email and address), commercial information (items ordered) and internet activity on this site (anonymous page views). We collect them for the purposes described in this policy. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We don't use or disclose sensitive personal information. We honour Global Privacy Control signals. To make a request, email . We'll verify the request using the email address on the order.
10. Children
This site isn't directed at children under 16, and we don't knowingly collect their personal data. If you think a child has given us personal data, contact us and we'll delete it.
11. Security
The site is only available over encrypted HTTPS and sends strict browser security headers. We keep the amount of personal data we handle to a minimum: there are no accounts or passwords on this site, and payment data never passes through it.
12. Changes
We'll update this policy if our practices or the law change. The effective date at the top always shows the latest version.