Privacy policy

1. What we collect

• Discord identity. Your Discord user ID, username and avatar, received when you sign in. We request the identify scope only.
• Role membership. Whether your account holds a customer, lifetime or staff role in our server. This is read live from Discord and cached for a few minutes.
• Licence and device data (once licences go live): the licence issued to you and a hashed device identifier so a licence can be bound to one device.
• Order and dispute records (once sales open): the order, amount, payment reference, the staff member who confirmed it, your recorded confirmation of immediate delivery, the delivery event, and licence activation history. Our refund policy commits us to producing these when a payment is disputed, so we have to keep them.
• Operational logs. Standard request logs kept on our server, including IP address, for security and abuse handling.

2. What we do not collect

• Your Discord messages, servers, friends or email address.
• Payment card numbers — a payment provider will handle those, not us.
• Anything from inside your device beyond the identifier a licence binds to.

There is no advertising network, no analytics vendor and no third-party tracker on this site. The Content-Security-Policy served with every page would block one from executing.

3. Why we hold it

To decide whether to open the panel for you, to issue and enforce a licence, to provide support, and to defend the service against abuse. That is the whole list.

4. How long

Session data lives in an encrypted cookie and expires after seven days. Web server access logs are rotated and kept for roughly two weeks.

Order and dispute records are kept for 24 months after the order. That is not arbitrary: payment networks allow disputes to be raised long after a purchase, and a record we deleted is a dispute we lose by default. Licence records are kept while the licence is active and for the same period after.

Ask us to delete your account data and we will, except for what we are required to keep for accounting, or what we need to defend a payment dispute that is still open or still possible.

5. Who else sees it

• Discord, because authentication and role membership happen there.
• Our hosting provider, which runs the site and keeps request logs.
• A payment provider, once licences go on sale.

We do not sell data, and we do not share it for marketing.

We operate from Italy and sell worldwide, so your data is processed there and by the providers listed above, wherever they are located. If that is not acceptable to you, do not buy — that is the honest answer rather than a paragraph pretending otherwise.

6. Security

The site is served over HTTPS with HSTS. Session cookies are HTTP-only, secure and same-site. Licence keys are stored hashed, never in plain text. Access is derived from your Discord role at request time, so revoking a role revokes access without anything else to clean up.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete the data we hold about you, and to object to processing. Ask Skar, @mr.skarth on Discord, and we will handle it.

8. Changes

Updates to this policy are announced in our Discord server.