What we collect, and what we do with it.

Masonic Workshop is a one-person business run by Mason McElroy in Austin, Texas, USA. This policy covers masonicworkshop.com. "We" and "us" mean Masonic Workshop.

Questions, or want something deleted? Email mason@masonicworkshop.com.

How people use the site. We use Google Analytics and the Meta Pixel to see which pages people visit and what they do there, so we can tell what's working and measure our ads. Along with page views, we record a few specific actions:

• clicking a link to our Etsy shop (those links carry tags that tell Etsy the visit came from this site),
• starting the Two Step demo,
• signing up for the homebrew waitlist (Meta also gets this as a "lead", without your email address),
• running a ROM in the cart tester, where we record only the result, never the ROM or its name.

Google and Meta collect things like your IP address, browser and device type, the page you came from, and identifiers stored in cookies. If you're logged in to Facebook or Instagram, Meta may connect your visit to your account.

The homebrew waitlist. If you sign up, we keep your email address and anything else you choose to send with it: a note about what you're making, and, if you came from the cart tester, your ROM's title and its result. We use it to email you when homebrew orders open, and we keep it until then.

Custom game orders. If you bought a game and we sent you a private order link, the names, words, photos, Etsy order number and email address you enter there are used to build your game and contact you about it. They're kept so we can fix or remake your game later; ask us any time and we'll delete them. Those order pages and your finished game's page at /play/ don't run Google Analytics or the Meta Pixel.

Spam protection. Our forms use Cloudflare Turnstile to check you're a person, and limit how often one IP address can send, so we briefly process your IP address for that.

What we don't collect. We don't take payments. Purchases happen on Etsy, and we never see your card details. The cart tester runs in your browser and never uploads your ROM.

We don't sell your information. These companies handle some of it for us:

• Google: Google Analytics, and the site's font (Google Fonts). See Google's privacy policy and how Google uses data from sites that use its services.
• Meta: the Meta Pixel, to measure and improve ads on Facebook and Instagram. See Meta's privacy policy.
• Etsy: where you buy from us. When you follow a link to our shop, Etsy's own privacy policy applies there, and Etsy shares your order details with us so we can make and ship it.
• Cloudflare: hosts the site, stores waitlist signups and order details, and runs Turnstile. See Cloudflare's privacy policy.
• Resend: delivers the site's emails: our copy of each signup and order, and the copy of your order we send you.

We'll also share information if the law requires it.

Google Analytics sets cookies whose names start with _ga, and the Meta Pixel sets one named _fbp. They let those services recognize a returning browser. They're only set on masonicworkshop.com itself.

The cookie notice at the bottom of the page is there to let you know. Pressing OK only hides it, and the site remembers that in your browser's local storage (mw-cookie-notice). It doesn't turn tracking on or off. To do that, use the options below.

• Your browser. Block or delete cookies in your browser's settings, browse in a private window, or use a content blocker. The site works without them.
• Google. Install the Google Analytics opt-out add-on, and choose what ads you see in My Ad Center.
• Meta. Change your ad settings and disconnect activity from other sites in Your activity off Meta technologies.
• Interest-based ads in general. Use the Digital Advertising Alliance's opt-out or, in the EU, Your Online Choices.

Email mason@masonicworkshop.com to ask what we have about you, to correct it, or to delete it, including taking you off the waitlist. We'll do it for anyone, wherever you live, and reply within 30 days. We may ask you to confirm it's your email address. We can't delete what Google, Meta or Etsy hold; use the links above for that.

Children. The site isn't aimed at children under 13, and we don't knowingly collect their information. If you think a child has sent us something, email us and we'll delete it.

Where it's stored. We're in the United States, and so are most of the services above, so your information may be handled there.

Changes. If we change this policy, we'll update it here and change the date at the top.