Privacy Policy

This Privacy Policy describes how War Wagon Cigar Lounge, LLC (“War Wagon,” “we,” “us,” or “our”), a Texas limited liability company, collects, uses, and shares personal information about you when you use thewarwagon.com, create an account, buy from us, or sign up for our Operatives membership.

Our address is 8480 Hwy 87 N, Orange, TX 77632. You can reach us at info@thewarwagon.com.

We collect three categories of information.

Information you give us directly. When you create an account, buy something, book a mobile event, or sign up for the newsletter, you may give us:

• Account information: email address and a password you choose.
• Profile information: first and last name, phone number, date of birth.
• Order and shipping information: shipping and billing addresses, items purchased, order history.
• Subscription information: membership tier, delivery method, payment method on file (tokenized - see Section 6).
• Age-verification information: name, date of birth, address, and last four digits of your Social Security number, which we pass to our third-party age-verification provider for identity matching. We store only the pass/fail result and the date.
• Communication preferences: email and SMS opt-in choices, notification settings.
• Anything you send us by email, SMS, or web form.

Information we collect automatically.

• Limited analytics through Plausible Analytics (self-hosted), which does not set tracking cookies and does not identify you individually. Plausible processes a truncated form of your IP address to count unique visits.
• Session and security cookies set when you sign in (managed by Supabase Auth), an age-gate dismissal cookie when you confirm you are 21+, and a shopping-cart cookie.
• Standard server logs (IP address, user-agent, request URL, timestamps) used for security and operations.

Information from third parties.

• A pass / fail result from our age-verification provider after you complete identity verification.
• A tokenized payment-profile reference from our payment processor after you save a card.
• Delivery status from our shipping carriers (USPS, UPS, etc.) for orders you place.

We use personal information to:

• Create and manage your account.
• Process and fulfill your orders and subscription drops.
• Verify that you are at least 21 years old before selling tobacco products to you.
• Send you transactional messages such as order confirmations, shipping notices, payment receipts, and account notifications.
• With your opt-in consent, send you marketing email or SMS about new products, drops, and events.
• Run our Operatives membership program, including issuing benefits and tracking lounge visits when you opt in.
• Detect and prevent fraud, abuse of the Service, and violations of our Terms.
• Comply with applicable law and respond to lawful requests.
• Operate, debug, and improve the Service.

We do not sell your personal information.

We share information only with the service providers and parties listed below, only to the extent needed for them to perform their role, and under contracts that require them to protect the information.

• Payment processor (Authorize.net): processes card payments, holds tokenized payment profiles. We never see your full card number.
• Age-verification provider (AgeChecker.Net): receives identity information at the moment of age verification (name, date of birth, address, and last four digits of your Social Security number) and returns a pass / fail result.
• Email provider (Resend): sends transactional and (with your consent) marketing email on our behalf.
• SMS provider (Twilio): sends SMS messages you have opted in to receive.
• Shipping carriers (USPS, UPS, etc.): receive your shipping address and order weight to deliver your package.
• Hosting and infrastructure: our website is hosted by Advance Servers; our database and authentication run on self-hosted Supabase on the same infrastructure.
• Analytics: Plausible Analytics, self-hosted, cookieless.
• Law enforcement and legal process: we may disclose information to law enforcement or other authorities when required by law (subpoena, court order, etc.).

If we are ever acquired or merged with another company, your information may be transferred to the successor. We will give you notice via the Service if that happens.

Federal and Texas law require tobacco retailers to verify the age and identity of buyers. Before we accept any tobacco order, we pass your name, date of birth, address, and last four digits of your Social Security number to AgeChecker.Net, our third-party age-verification provider, for an identity match against public records. AgeChecker.Net returns a pass / fail result.

We store only the pass / fail result, the date of verification, and a reference to the verification record. We do not store the ID images or the underlying public-record data. AgeChecker.Net handles that information under its own privacy policy, which is available at agechecker.net/privacy.

Verified status is cached for ninety (90) days. After that, the next tobacco purchase will require re-verification.

Card data is collected directly from your browser by our payment processor (Authorize.net) through their hosted Accept.js fields. The card number, security code, and full magnetic-stripe data never reach our servers and we never store them.

What we store is a tokenized reference (a payment-profile ID that has no value outside our merchant account), the last four digits of the card, the card brand, and the expiration date. These are used to display saved cards on your account page and to charge recurring subscriptions.

To remove a saved payment method, sign in and delete it from your Payment Methods page, or email info@thewarwagon.com.

We use only essential cookies:

• Auth session cookie (set when you sign in) so you stay signed in across pages. Managed by Supabase Auth.
• Age-gate dismissal cookie so we do not show you the 21+ confirmation modal on every visit.
• Cart cookie so your shopping cart survives page navigation.

We do not use cross-site tracking cookies, advertising pixels, or third-party tracking scripts. Our analytics provider (Plausible) does not set cookies and does not identify you individually.

We send two kinds of email:

• Transactional messages tied to your account and orders: account confirmation, password resets, order receipts, shipping notifications, subscription notices. You cannot opt out of these while you have an active account or open order.
• Marketing messages about new products, drops, and events. We send these only if you opted in. Every marketing email includes a one-click unsubscribe link, and unsubscribing applies immediately.

By providing your phone number and opting in to SMS at sign-up or in your account settings, you agree to receive recurring SMS messages from War Wagon, including transactional messages (order updates) and, if you opted in to marketing SMS, messages about drops and promotions.

Message frequency varies. Message and data rates may apply depending on your mobile plan. Reply STOP at any time to unsubscribe. Reply HELP for help, or email info@thewarwagon.com.

Consent to receive SMS is not a condition of purchase.

We retain personal information for as long as you have an active account and for an additional period after account closure as required for accounting, tax, dispute resolution, and legal compliance. Specifically:

• Order and payment records: retained for at least seven (7) years to comply with tax and accounting requirements.
• Age verification records: retained for the period required by applicable tobacco regulations.
• Marketing opt-in records and consent logs: retained as long as needed to demonstrate compliance with CAN-SPAM and TCPA.
• Other account data is deleted or anonymized within twenty-four (24) months of account closure unless we are required to retain it longer.

You can do most of the following directly from your account:

• View and update your profile, addresses, and saved cards.
• Change email and SMS notification preferences.
• Cancel an Operatives membership or Nomad subscription.
• Close your account.

You can also ask us to do any of the following by emailing info@thewarwagon.com:

• Give you a copy of the personal information we have about you.
• Correct inaccurate information we have about you.
• Delete information we have about you (subject to retention obligations in Section 10).
• Opt you out of any marketing communications.

We may ask you to verify your identity before responding to a request. We will respond within thirty (30) days, or sooner where required by law.

California residents have the following rights under the California Consumer Privacy Act:

• Right to know: request the categories and specific pieces of personal information we have collected about you.
• Right to delete: request that we delete personal information we have collected from you, subject to limited exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing: we do not sell personal information and we do not share it for cross-context behavioral advertising. There is nothing to opt out of, but this right is preserved.
• Right to non-discrimination: we will not deny you service, charge you a different price, or provide a lower quality of service if you exercise any of these rights.

To exercise any of these rights, email info@thewarwagon.com.

The Service is intended for users who are at least twenty-one (21) years old. We do not knowingly collect personal information from anyone under thirteen (13) in compliance with the Children's Online Privacy Protection Act (COPPA), and we do not knowingly serve anyone under twenty-one (21).

If you are a parent or guardian and believe a child under 13 or a minor under 21 has provided us with personal information, email info@thewarwagon.com and we will delete the information.

We use commercially reasonable technical, administrative, and physical safeguards to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. These include encryption in transit (HTTPS), encryption at rest for backups, role-based access controls on our administrative tools, and not storing raw payment card numbers on our servers.

No security control is perfect and no transmission over the internet can be guaranteed secure. We cannot guarantee that unauthorized access will not occur. If you believe your account may have been compromised, email info@thewarwagon.com immediately.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when the current version took effect. If a change is material, we will make reasonable efforts to notify you by email or via the Service.

For any privacy question, to exercise a right under this Policy, or to file a privacy complaint, email info@thewarwagon.com.

You can also write to us at:
War Wagon Cigar Lounge, LLC
Attn: Privacy
8480 Hwy 87 N
Orange, TX 77632

See also our Terms of Service.