Privacy Policy

Account: email address, optional display name and email-verification status. Sign-in is handled by Discord, from which we receive the account identifier plus the name and avatar you authorised; we never store a password. Used for sign-in, verification and account security.

Orders and subscriptions: customer profile, order records (item, amount, currency, time), subscription status and expiry, payment outcome and the channel's transaction reference. Used to deliver entitlements, for accounting and for support.

Payments: card numbers and wallet credentials are handled entirely by PayPal (USD) or epay/Alipay (CNY). We only store the payment's status, amount, currency and channel reference — never card numbers or payment keys.

Desktop seat: to verify your entitlement we store a customer identifier, a device identifier generated by the desktop tool, an optional device name, and the token's expiry time. Activating on a new device overwrites that record.

Sessions and security logs: sign-in session records (creation time, IP, browser identifier) and request metadata (IP, time, result) for staying signed in, anti-abuse and troubleshooting.

We do not collect: shipping or billing addresses (digital goods need no postage), phone numbers, card numbers, precise location or advertising identifiers.

Performance of a contract (delivering the service and entitlements you bought), legitimate interests (account security, anti-abuse, troubleshooting), consent (for example when you choose third-party sign-in, or if optional analytics is ever enabled), and legal obligations (tax and accounting records).

You can withdraw consent at any time; withdrawing does not affect the lawfulness of processing carried out before the withdrawal.

Processors: Tencent Cloud (server hosting), Cloudflare (CDN and security, which sees request metadata), PayPal (USD payments), epay/Alipay (CNY payments), Resend (verification and transactional email), and Discord for sign-in.

We sign data-processing terms with our processors, allow them to process data only on our instructions, and require an adequate level of protection.

We may disclose necessary data to law-enforcement or regulators when legally required. We never sell or rent personal data, and we do not build cross-site advertising profiles.

Our servers are hosted by Tencent Cloud in the United States (California), and some processors (such as PayPal, Resend and Cloudflare) are located in other jurisdictions. Your data may therefore be transferred to and processed outside your country.

For cross-border transfers we rely on our processors' standard contractual clauses and data-processing agreements, and require a level of protection comparable to what your jurisdiction expects.

We use strictly necessary cookies only: sign-in session, cart, language and region preferences, and banner dismissal state. The full list is in the Cookie Policy.

We do not use advertising or cross-site tracking cookies, and no third-party web analytics is active today. If privacy-friendly analytics is ever enabled, we will update this policy first and ask for your consent where required before setting anything.

Account data is kept while your account exists; you can ask us to delete it at any time and we will delete or anonymise it once verified, except for records we must keep by law.

Order and subscription records are kept as accounting and tax rules require; security logs roll off automatically and are used for nothing else; verification and reset tokens are short-lived and stop working once used.

Desktop seat records are kept until a new device replaces them, the entitlement expires, or the account is deleted.

You can access, correct, delete, export (portability), restrict or object to our processing of your data, and withdraw consent at any time; exercising these rights will not be held against you. We do not sell or share your personal data for advertising.

To exercise them, email [email protected] from your account address (mark privacy requests "privacy"). We reply within a reasonable period, normally within 30 days. Records we must keep by law (tax, anti-fraud) may not be deletable; we will tell you what is kept and why.

If you believe we handled your data badly, you can complain to the data-protection authority where you live.

HTTPS enforced with HSTS: HTTP requests permanently redirect to HTTPS and browsers are told to use HTTPS only from then on (180-day policy, no subdomains, not preloaded); we store no passwords — sign-in credentials are verified by Discord; session cookies are HttpOnly and sent only over encrypted transport; secrets live in permission-restricted server-side environment files and never in browser code; desktop entitlement tokens are HMAC-signed and bound to a device.

No system is perfectly secure. If you find a security problem, please report it to the address above — we will not pursue good-faith security research.

The service is aimed at users who are at least the digital-consent age where they live (never below 13; 16 in some jurisdictions). We do not knowingly collect data from younger children, and we delete such data if we find it.

If this policy changes materially we announce it on the changelog page and email users who left an address; the "last updated" date at the top of the page always reflects the current version.

Privacy questions and requests: [email protected].