Privacy Policy

1. Data We Collect

When you sign in with Discord, Google, or Twitch, we collect your display name, email address (if provided by the provider), and profile image. We also collect purchase history and account balance associated with your account.

Our servers record technical data needed to run and protect the service: your IP address and browser user agent are used for security checks, abuse prevention and rate limiting, and we log which parts of the site you interact with.

If — and only if — you accept analytics cookies, we additionally collect the usage data described in section 5.

2. How We Use Your Data

Your data is used to operate your account, process purchases, provide customer support, keep the service secure, and — with your consent — to understand how the site is used. We do not sell your personal data to third parties.

3. Legal Bases (GDPR)

• Contract — account data, purchases, code delivery and support.
• Legitimate interests — security, fraud and abuse prevention, rate limiting.
• Consent — analytics and session recording (section 5). You may withdraw it at any time and the service keeps working normally without it.
• Legal obligation — retaining transaction records where tax or accounting law requires it.

4. Third-Party Sign-In and Payments

We use OAuth 2.0 via Discord, Google, and Twitch for authentication. We only receive the data those platforms share with us based on the permissions you grant.

Payments are processed by Stripe or PayPal. We do not store your card or payment details. Please refer to Stripe's and PayPal's privacy policies for their data practices.

5. Analytics and Session Recording

These tools load only after you accept analytics cookies. Until then no analytics request is sent and no analytics cookie is set.

• Google Analytics 4 (Google Ireland Ltd.) — pages visited, approximate location derived from IP, device and browser type, and referring site.
• Microsoft Clarity (Microsoft Ireland Operations Ltd.) — records your session: mouse movement, clicks, scrolling and the page content you saw, aggregated into heatmaps. Clarity masks text input fields by default, so what you type into forms is not captured.

Both providers act as processors and may transfer data outside the EU/EEA under the EU–US Data Privacy Framework and standard contractual clauses. You can withdraw consent whenever you like from our Cookie Policy.

6. Data Retention

We retain your account data for as long as your account is active. Transaction records are kept where tax or accounting law requires. Google Analytics data is retained for up to 14 months and Microsoft Clarity recordings for up to 30 days, both handled by those providers. You may request deletion of your data by contacting us on Discord.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, delete, or receive a portable copy of your personal data. You may also object to or restrict processing, withdraw consent at any time, and lodge a complaint with your national data protection authority. Contact us on Discord to exercise these rights.

8. Cookies

See our Cookie Policy for details on how we use cookies and local storage.

9. Contact

Privacy questions: Discord.