Legal
Legal & Privacy
Everything you need to know about what this site is — and what it isn't.
Parody Disclaimer
This website is a satirical parody merch concept for Duel (duel.com), a real gambling platform. This is not an official Duel product, store, or affiliated project.
The "Duel" brand, logo, and name belong to their respective owners at duel.com. This site is a fan-made creative exercise — a parody merch concept imagining what a Duel-branded lifestyle product line might look like. It is not intended to mislead, impersonate, or cause confusion with the real brand.
The range on this site is made to order. At checkout you pay securely through Stripe, and card details go straight to Stripe — this site never sees or stores them. You can also reserve a basket, which records an expression of interest and nothing more — no payment is taken, and it places you under no obligation.
The "Duel" brand, logo, and name belong to their respective owners at duel.com. This site is a fan-made creative exercise — a parody merch concept imagining what a Duel-branded lifestyle product line might look like. It is not intended to mislead, impersonate, or cause confusion with the real brand.
The range on this site is made to order. At checkout you pay securely through Stripe, and card details go straight to Stripe — this site never sees or stores them. You can also reserve a basket, which records an expression of interest and nothing more — no payment is taken, and it places you under no obligation.
Privacy Policy
There are no user accounts and no advertising trackers on this site. Analytics is Datafast running in cookieless mode: it counts page views and visits, checkout-funnel steps and completed-order totals — never emails, names or addresses — and that counting happens on Datafast’s servers, so your visit is processed there to produce aggregate counts — their privacy policy governs that part. Server access logs are also scanned for known search-engine and AI crawlers (never for visitors): only the crawler’s user-agent, IP, requested page and response status leave the box, so we can see what bots read. Card numbers are never collected or stored here — card payment is handled entirely by Stripe, and crypto is sent from your own wallet to a one-time address shown at checkout, so wallet keys never reach us either. The main categories of data collected are described below.
If you reserve a basket, we record the email address you type in, the name if you choose to give one, the items and quantities in your basket, and the time you sent it. We also record the delivery address when supplied, session ID, IP hash and browser user agent. Confirmation email is attempted when email delivery is configured; a reservation does not guarantee availability.
If you buy something, we record your email, name, delivery address, the items, and what you paid, so the order can be produced, posted, and supported afterwards. As it moves along we add the fulfilment trail — when it shipped and arrived, the courier's tracking number and link, and any note about the delivery — which is what the tracking page shows you when you enter your order code and email. Stripe separately receives what it needs to take a card payment — your email, the amount, and the card details you type into their checkout, which never reach us. If you pay with crypto, NOWPayments, our crypto processor, likewise receives your email and the amount, and you send the coins yourself from your own wallet to a one-time address — nothing on this site can move your funds.
On every page, we record which page you looked at, where you arrived from, your browser's user-agent string, and which of a small fixed list of actions you took — opening the cart, picking a pack, adding an item, starting a reservation. These are counted in aggregate to see which products people are interested in.
To tell one visit apart from another we generate a random ID and keep it in your browser's local storage under
One thing worth naming plainly: this page loads fonts from Google Fonts, JavaScript libraries from unpkg.com, and sends a cookieless analytics beacon to Datafast (datafa.st). As with anything your browser fetches from another domain, those providers can see your IP address when that happens. That is outside our control and not something we receive — beyond the aggregate counts Datafast shows us.
If you reserve a basket, we record the email address you type in, the name if you choose to give one, the items and quantities in your basket, and the time you sent it. We also record the delivery address when supplied, session ID, IP hash and browser user agent. Confirmation email is attempted when email delivery is configured; a reservation does not guarantee availability.
If you buy something, we record your email, name, delivery address, the items, and what you paid, so the order can be produced, posted, and supported afterwards. As it moves along we add the fulfilment trail — when it shipped and arrived, the courier's tracking number and link, and any note about the delivery — which is what the tracking page shows you when you enter your order code and email. Stripe separately receives what it needs to take a card payment — your email, the amount, and the card details you type into their checkout, which never reach us. If you pay with crypto, NOWPayments, our crypto processor, likewise receives your email and the amount, and you send the coins yourself from your own wallet to a one-time address — nothing on this site can move your funds.
On every page, we record which page you looked at, where you arrived from, your browser's user-agent string, and which of a small fixed list of actions you took — opening the cart, picking a pack, adding an item, starting a reservation. These are counted in aggregate to see which products people are interested in.
To tell one visit apart from another we generate a random ID and keep it in your browser's local storage under
duel_sid. This identifier is sent to our API with events and orders and can link those records. The basket is also stored locally as duel_cart. Clearing site data removes these browser records.
One thing worth naming plainly: this page loads fonts from Google Fonts, JavaScript libraries from unpkg.com, and sends a cookieless analytics beacon to Datafast (datafa.st). As with anything your browser fetches from another domain, those providers can see your IP address when that happens. That is outside our control and not something we receive — beyond the aggregate counts Datafast shows us.
What We Store, And Where
Reservations, orders, support tickets and page events are stored by the shop backend. The production deployment uses PostgreSQL. Administrative access requires a secret token.
Your email address is also passed to Resend, the service that actually delivers the confirmation message — an email cannot reach you without going through something. When you pay, Stripe receives your email, the amount, and the card details you type into their checkout, and returns only a confirmation that the money moved. When an order is produced, Printify receives your name, delivery address, and the items, so they can make and post them. Hosting and email providers also process data to operate the shop. Support tickets store your contact details and messages.
Everything travels over HTTPS, so it is encrypted between your browser and the server.
The application stores a salted hash of your IP address. It is used for abuse prevention and recorded with events, orders and support activity. Hashing is pseudonymisation, not a guarantee of anonymity. Web-server access logs can contain the original IP address.
Two honest limits. Nothing here is anonymous once you hand over an email, because an email address identifies you — that is the point of it. And this is a hobby project, not a bank: it is built carefully, but it carries no security guarantee, so do not send anything you would mind being seen.
Your email address is also passed to Resend, the service that actually delivers the confirmation message — an email cannot reach you without going through something. When you pay, Stripe receives your email, the amount, and the card details you type into their checkout, and returns only a confirmation that the money moved. When an order is produced, Printify receives your name, delivery address, and the items, so they can make and post them. Hosting and email providers also process data to operate the shop. Support tickets store your contact details and messages.
Everything travels over HTTPS, so it is encrypted between your browser and the server.
The application stores a salted hash of your IP address. It is used for abuse prevention and recorded with events, orders and support activity. Hashing is pseudonymisation, not a guarantee of anonymity. Web-server access logs can contain the original IP address.
Two honest limits. Nothing here is anonymous once you hand over an email, because an email address identifies you — that is the point of it. And this is a hobby project, not a bank: it is built carefully, but it carries no security guarantee, so do not send anything you would mind being seen.
Buying, Delivery & Refunds
Prices are shown in US dollars unless your delivery country prices differently. The checkout always states the final total, including delivery, and the currency you will actually be charged in before you pay — that figure is the one that counts, not anything shown earlier on the page.
Everything is made to order, so nothing ships the same day. Delivery is quoted from your address at checkout and added to the total there; the estimate shown on product pages is only ever an estimate. If anything arrives faulty, damaged, or wrong, contact support and it will be refunded or replaced. Contact support about a return before sending anything back. Any applicable statutory rights are unaffected.
A reservation is not an order: it holds nothing, charges nothing, and obliges neither side to anything.
Everything is made to order, so nothing ships the same day. Delivery is quoted from your address at checkout and added to the total there; the estimate shown on product pages is only ever an estimate. If anything arrives faulty, damaged, or wrong, contact support and it will be refunded or replaced. Contact support about a return before sending anything back. Any applicable statutory rights are unaffected.
A reservation is not an order: it holds nothing, charges nothing, and obliges neither side to anything.
Retention And Your Rights
Reservations are kept until checkout opens and we have contacted you, or until you ask us to delete yours — whichever comes first. Paid orders are kept while needed for our records and to handle support. Individual page events are retained for a configured period (90 days by default) before cleanup. They carry session identifiers that may also appear on orders.
You can ask for a copy of what we hold about you, ask for it corrected, or ask for it deleted outright, and we will do it. Contact support using the link below and identify the relevant order or email address. We may need to verify your identity before releasing or changing personal information.
If you are in the UK or the EU, the UK GDPR and the GDPR give you those rights as a matter of law, along with the right to object to processing and to complain to a regulator — in the UK, the Information Commissioner's Office at ico.org.uk.
To stop the page-event collection entirely, block JavaScript for this domain or use a content blocker. Static content pages remain readable, but the homepage, product controls, cart, support forms and checkout depend on JavaScript.
You can ask for a copy of what we hold about you, ask for it corrected, or ask for it deleted outright, and we will do it. Contact support using the link below and identify the relevant order or email address. We may need to verify your identity before releasing or changing personal information.
If you are in the UK or the EU, the UK GDPR and the GDPR give you those rights as a matter of law, along with the right to object to processing and to complain to a regulator — in the UK, the Information Commissioner's Office at ico.org.uk.
To stop the page-event collection entirely, block JavaScript for this domain or use a content blocker. Static content pages remain readable, but the homepage, product controls, cart, support forms and checkout depend on JavaScript.
Trademarks
All trademarks, registered trademarks, and product names mentioned on this site are the property of their respective owners. Their use on this site is for parody, commentary and creative purposes.
This site does not claim ownership of, endorsement by, or affiliation with Duel (duel.com) or any other brand referenced herein.
This site does not claim ownership of, endorsement by, or affiliation with Duel (duel.com) or any other brand referenced herein.
Contact
Something wrong with an order? Open a support ticket —
it becomes a thread you can come back to, and we answer by email.
For anything else, or just to say hi, reach out on Discord: b.dingus (Discord username)
For anything else, or just to say hi, reach out on Discord: b.dingus (Discord username)