Privacy Policy
Last updated: August 2026
Placeholder template: this document is example text and has NOT been reviewed by a lawyer. Replace it with legal text tailored to your business and jurisdiction before launch.
1. Data we collect
- Account data: email address, username, password hash, optional avatar.
- OAuth data: Discord/Google profile ID, username and email when you connect them.
- Order data: purchased products, amounts, payment provider references.
- Technical data: IP address and browser user-agent for security logging (downloads, rate limiting).
2. What we use it for
- Delivering purchases, generating licenses and providing downloads.
- Sending transactional emails (receipts, license keys, password resets, product updates).
- Fraud prevention, abuse detection and securing the platform.
3. Payment data
Card and PayPal details are processed directly by Stripe and PayPal. We never see or store your full payment credentials — we only store provider transaction references.
4. Third parties
We share data only with the processors needed to run the store: payment providers (Stripe, PayPal), email delivery (Resend), hosting and file storage providers. We do not sell personal data.
5. Retention & your rights
Order records are kept as long as required for accounting. You may request access to or deletion of your personal data by contacting us; note that we may need to retain transaction records required by law.
6. Cookies
We use strictly necessary cookies for authentication (session cookies) and cart persistence. No third-party advertising cookies are used.