Last updated 22 August 2026.
This page explains what we collect when you use this site, why, and what you can do about it. It describes what actually happens — if something here does not match what the site does, the page is wrong and we want to hear about it.
Who is responsible
TSTCK AB (org. no. 559144-9557)
Tollareslingan 7
132 49 Saltsjö-Boo
Sweden
We are the data controller for everything described below. Email is the fastest way to reach us: support@pwrcap.com. Phone: +46 (0)36 17 29 61.
When you place an order
We collect your name, delivery and billing address, email address and phone number. We need them to take the order, ship it, and handle any return or complaint afterwards. The legal basis is the contract between us, and for the accounting records, our legal obligation to keep them.
Your card details never reach us. Payments are handled by Stripe, and the card fields in the checkout belong to Stripe rather than to this site. We see that a payment succeeded, the amount, and the type of card — nothing more.
Orders and the invoicing data attached to them are kept for seven years, because Swedish accounting law requires it.
If you create an account
An account is optional — you can buy without one. If you make one, we store the email address and the details you save, so the checkout can fill them in next time and you can see your order history. You can see and change all of it under My account, and you can ask us to delete the account at any time.
If you send us a message
The contact form and the forms on the pages about selling PWR CAP send us what you type, and store a copy on this site so nothing gets lost between inboxes. That means your name, your email address, and whatever else you chose to tell us.
We use it to answer you and, if it goes somewhere, to set up the arrangement we discussed. We keep enquiries for two years and then delete them. If you sell for us, that becomes a business relationship with its own records.
One thing worth saying plainly: the form for players selling caps on their own does not ask your age or your date of birth, and we do not store it. If you are under 18 we will ask to speak to a parent or guardian before anything is agreed, but we do not need the number.
Cookies and measurement
You choose this yourself. The banner on your first visit has Accept all and Adjust settings, and you can change your mind whenever you like through the Cookie settings link in the footer. There are three categories:
- Strictly necessary — the cart, staying logged in, and remembering the cookie choice you just made. These cannot be switched off, because the shop stops working without them. No consent is needed for them and none is asked.
- Statistics — lets us recognise your browser on a later visit, so we can tell a returning visitor from a new one and see whether a change to the site actually helped. Off until you say yes.
- Marketing — records which link, search or campaign brought you here, and lets Meta (Facebook and Instagram) know when one of their adverts led to a purchase, so we can tell which ones are worth paying for. This is the one category that shares data with a third party. Off until you say yes.
We do count visits without any of this — how many people came, which pages they read, roughly what kind of device. That measurement is anonymous, sets no cookie, and cannot be tied back to you. Saying no costs you nothing and costs us only the memory between visits.
We do not sell any of it. The only advertising network that receives anything is Meta, only if you accept the marketing category, and only what is described below.
Who else sees your data
Only the companies we need to run the shop, and only what they need:
- Stripe — takes the payment. They receive the payment details directly from you and the order amount from us.
- Meta (Facebook, Instagram) — only if you accept marketing. Their measurement code runs in your browser, and we also send them a record of the purchase from our own server so it is not lost to an ad blocker. What they get: which products you looked at and bought, the amount, and your email, phone, name, town, postcode and country — those last ones scrambled into an unreadable fingerprint before they leave us, so Meta can match you to someone who saw an advert without us handing over the details themselves. Meta is in the United States; the transfer relies on the EU–US Data Privacy Framework. Refuse marketing and none of this happens.
- The carrier — receives the name and delivery address needed to bring the parcel to your door.
- Our hosting and email providers — store the site and send order confirmations on our behalf, under contracts that keep them from using the data for anything else.
We do not sell personal data. We do not share it for anyone else’s marketing.
Your rights
Under the GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Where we rely on your consent — the two optional cookie categories above — you can withdraw it at any time, and that is as easy as giving it: the Cookie settings link in the footer.
Ask at support@pwrcap.com and we will answer within a month. The one thing we cannot delete on request is data we are legally required to keep, such as the accounting record of an order you actually placed.
If you think we have handled your data badly and we have not put it right, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).
Where your data is kept
Within the EU/EEA, with one exception. Meta processes data in the United States under the EU–US Data Privacy Framework, and only for visitors who accept the marketing category. Where any other provider processes data outside the EEA, that transfer is covered by the European Commission’s standard contractual clauses.