Privacy
This page explains what data Mago Shop uses, what it's for and how Amage Rastro measures how the shop is used. Mago Shop is run from Brazil by the team behind Loja do Mago.
Updated .
Your account, orders and payments
We use the data you give us, such as your name, e-mail, an optional contact and your farm tags, to run your account, find the farm that will receive your kits and handle your orders. For each order we also keep the farm tag and nickname, the contact you gave, the products, quantities and amounts, and how the order and its delivery went, so we can deliver it, answer you about it and show your order history.
Delivery happens inside the game: one of our farms sends a friend request to the farm tag on the order and puts the crates in its Roadside Shop for you to buy. We never ask for your game password or access to your game account.
Prices are in US dollars. Card payments are processed by Stripe, and crypto payments, when offered, by NOWPayments; each one processes the payment on its own platform, under its own terms and privacy policy. We only receive what we need to confirm your order, such as the payment status, the amount, the card brand and its last four digits, or the coin you paid with. We never see your full card number, nor your wallet's private keys or recovery phrase. Keep in mind that crypto transactions are recorded on public blockchains.
If you arrived through a friend's invite, that friend sees your farm's name in their list of invited friends, never your contact. If you leave a note on the Farmers' wall, it shows your rating, your text and the farm name or initials you choose; your farm tag never shows.
How we use Amage Rastro
Amage Rastro is the analytics tool by AMAGE that Mago Shop uses. It helps us understand how people find the shop, which products they're interested in and where browsing or buying could be better. It collects data while you use the site, including before you sign in.
- Pages visited, times, visit length, where the visit came from and campaign information.
- Clicks on buttons and links, including the visible text of those elements and where the links go.
- Actions such as adding products to the cart, starting checkout, creating an order, signing in and saving a farm.
- Products, quantities and amounts tied to a purchase, including confirmed payments.
- Device type, browser, operating system, approximate location, and how fast pages load and respond.
Your visits here aren't linked to your account. Mago Shop doesn't send your name, e-mail or account details to Rastro. When an order is paid, the purchase (products, quantities and amount) is recorded together with the visit that made it.
Rastro records a sequence of events. It doesn't record a video of your screen, the keys you type or the values you fill in on forms.
Cookies and data in your browser
The site uses sign-in cookies to keep you signed in to your account. They last up to 180 days and are renewed while you keep using the shop.
Your browser's local storage keeps your cart, the orders opened on this device (so you can get back to them), the invite you arrived through (for 30 days) and a note of your first visit, used to show what's new. Rastro uses identifiers in local and session storage to recognize visits; they don't rely on cookies, but they still involve browsing data.
You can delete cookies and site data in your browser settings. That may sign you out and empty your cart, but it doesn't delete orders or records already stored on our servers. New identifiers may be created when you come back.
Who sees the data and how long we keep it
Account, order and analytics records stay on the infrastructure the shop uses and can be viewed by the authorized team in the Mago and AMAGE dashboards. Our hosting and database providers also process the information needed to keep the site running, so your data may be processed in Brazil and in the countries where those providers operate. We don't sell your data.
To estimate the region of a visit, the integration may look up the connection's IP address with the IPWhois service. The location is approximate and never uses your device's GPS. Rastro doesn't keep the raw IP address in its analytics records.
We keep account and order records while your account exists and for as long as we need them to deliver and support orders, prevent fraud and meet legal obligations. Analytics records are kept only as long as they're useful for understanding how the shop is used.
Your data and your choices
In My account, you can update your name and contact, manage your saved farms and see your order history.
You can ask to see the data we hold about you, to correct it or to delete it. To make a request or ask anything about your privacy, open a ticket with “Report a problem” on your order page (from the link in your order e-mail or in My account), and we'll answer you there.